EUVD-2018-12006

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

IBM GSKit in DB2 could allow local attackers to overflow environment variables causing denial of service.

Reporter	Title	Published	Views	Family All 66
IBM Security Bulletins	Security Bulletin: Rational DOORS is affected by multiple vulnerabilities	29 Jun 202016:11	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM HTTP Server affects Netezza Performance Portal	18 Oct 201903:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Privileged Identity Manager is affected by multiple vulnerabilities	2 Jul 201902:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Metrics Manager 2018 Q1 Security Update: IBM Cognos Metrics Manager is affected by multiple vulnerabilities.	15 Jun 201823:51	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in GSKit affect IBM Tivoli Directory Server and IBM Security Directory Server for AIX	2 Jan 201914:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security SiteProtector System is affected by GSKit vulnerabilities	19 Jul 201808:30	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM GSKit affect IBM Personal Communications	30 Jul 201817:22	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Content Collector for SAP Applications is affected by GSKit and GSKit-Crypto vulnerabilities	30 Aug 201812:21	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in the GSKit component of Tivoli Netcool/OMNIbus	17 Jun 201815:15	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in the IBM GSKit component of IBM Spectrum Protect Snapshot (formerly Tivoli Storage FlashCopy Manager) for VMware	1 Feb 202211:19	–	ibm

[
  {
    "enisaIdVendor": [
      {
        "id": "2733238e-7495-3631-9643-a471fe38a908",
        "vendor": {
          "name": "IBM"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "32488535-0b96-3e2e-aa00-02ea94106e8f",
        "product": {
          "name": "Db2 for Linux, UNIX and Windows"
        },
        "product_version": "10.5"
      },
      {
        "id": "345517c8-48a2-30ae-b027-e5e31b2f734b",
        "product": {
          "name": "Db2 for Linux, UNIX and Windows"
        },
        "product_version": "11.1"
      },
      {
        "id": "5cf6820d-aec6-31cb-a4e2-5e86048034dc",
        "product": {
          "name": "Db2 for Linux, UNIX and Windows"
        },
        "product_version": "9.7"
      },
      {
        "id": "f3f85f93-aaa8-3088-bcc8-ed220ec40783",
        "product": {
          "name": "Db2 for Linux, UNIX and Windows"
        },
        "product_version": "10.1"
      }
    ]
  }
]

Source	Link
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/139072
ibm	www.ibm.com/support/docview.wss
securityfocus	www.securityfocus.com/bid/103536
securitytracker	www.securitytracker.com/id/1041012
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

7.3High risk

Vulners AI Score7.3

CVSS 35.5 - 6.2

CVSS 22.1

EPSS0.00067