CVE-2018-1897

🗓️ 30 Nov 2018 15:00:00Reported by ibmType

IBM DB2 stack buffer overflow vulnerabilit

Reporter	Title	Published	Views	Family All 12
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been identified in DB2 that affect the IBM Performance Management product	26 Mar 201917:35	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM DB2 shipped with IBM Maximo APM - Predictive Maintenance Insights On-Premise (CVE-2018-1897)	13 Dec 201808:40	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in IBM Db2 shipped with Predictive Maintenance and Quality (CVE-2018-1897, CVE-2018-1723)	13 Dec 201808:40	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in IBM DB2 shipped with IBM Maximo Asset Management	6 Dec 201813:25	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Db2 vulnerabilities affect the IBM Spectrum Protect Server (CVE-2018-1685, CVE-2018-1710, CVE-2018-1711, CVE-2018-1780, CVE-2018-1781, CVE-2018-1799, CVE-2018-1802, CVE-2018-1834, CVE-2018-1857, CVE-2018-1897)	28 Jun 201922:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Db2® is vulnerable to a buffer overflow leading to privilege escalation (CVE-2018-1897).	6 Mar 202019:24	–	ibm
BDU FSTEC	The vulnerability of the db2pdcfg command implementation in the IBM DB2 database management system allows a attacker to execute arbitrary code.	27 Jan 202000:00	–	bdu_fstec
CNVD	IBM DB2 db2pdcfg Buffer Overflow Vulnerability	29 Nov 201800:00	–	cnvd
CVE	CVE-2018-1897	30 Nov 201815:00	–	cve
EUVD	EUVD-2018-12476	7 Oct 202500:30	–	euvd

[
  {
    "product": "DB2 for Linux, UNIX and Windows",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "10.5"
      },
      {
        "status": "affected",
        "version": "10.1"
      },
      {
        "status": "affected",
        "version": "9.7"
      },
      {
        "status": "affected",
        "version": "11.1"
      }
    ]
  }
]

Source	Link
ibm	www.ibm.com/support/docview.wss
securitytracker	www.securitytracker.com/id/1042165
securityfocus	www.securityfocus.com/bid/106060
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/152462

04 Dec 2018 10:57Current

8.4High risk

Vulners AI Score8.4

CVSS 38.4

EPSS0.00101