Lucene search

IbmCVELIST:CVE-2023-28526

HistoryDec 09, 2023 - 2:22 a.m.

CVE-2023-28526 IBM Informix Dynamic Server buffer overflow

2023-12-0902:22:19

CWE-122

ibm

www.cve.org

ibm

informix

dynamic server

buffer overflow

local user

segmentation fault

6.2 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

IBM Informix Dynamic Server 12.10 and 14.10 archecker is vulnerable to a heap buffer overflow, caused by improper bounds checking which could allow a local user to cause a segmentation fault. IBM X-Force ID: 251204.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Informix Dynamic Server",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "12.10, 14.10"
      }
    ]
  }
]

References

exchange.xforce.ibmcloud.com/vulnerabilities/251204

www.ibm.com/support/pages/node/7070188

6.2 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVELIST:CVE-2023-28526