EUVD-2018-12557

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

IBM DB2 versions 9.7 to 11.1 vulnerable to buffer overflow, allowing local code execution as root.

Reporter	Title	Published	Views	Family All 13
IBM Security Bulletins	Security Bulletin: One or more security vulnerabilities has been identified in IBM® DB2® shipped with IBM PureData System for Operational Analytics (CVE-2018-1980,CVE-2019-4094,CVE-2018-1922,CVE-2018-1978,CVE-2018-1923,CVE-2019-4016,CVE-2019-4015)	4 Apr 202220:43	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM Db2 shipped with IBM Maximo APM - Predictive Maintenance Insights On-Premise	10 Apr 201914:35	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Db2 vulnerabilities affect the IBM Spectrum Protect Server (CVE-2018-1922, CVE-2018-1923, CVE-2018-1936, CVE-2018-1978, CVE-2018-1980, CVE-2019-4014, CVE-2019-4015, CVE-2019-4016, CVE-2019-4094)	28 Jun 201921:25	–	ibm
IBM Security Bulletins	A security vulnerability has been identified in IBM DB2 shipped with IBM Maximo Asset Management	19 Mar 201913:55	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been identified in DB2 that affect the IBM Performance Management product	22 Aug 201917:46	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple buffer overflow vulnerabilities exist in IBM® Db2® leading to privilege escalation (CVE-2018-1922, CVE-2018-1923, CVE-2018-1978, CVE-2018-1980, CVE-2019-4015, CVE-2019-4016).	6 Mar 202019:29	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM Db2 shipped with Predictive Maintenance and Quality	10 Apr 201914:35	–	ibm
CNVD	IBM DB2 Buffer Overflow Vulnerability (CNVD-2019-07259)	12 Mar 201900:00	–	cnvd
CVE	CVE-2018-1978	11 Mar 201922:00	–	cve
Cvelist	CVE-2018-1978	11 Mar 201922:00	–	cvelist

[
  {
    "enisaIdVendor": [
      {
        "id": "48edd51c-4b9a-3a8f-94d3-9c71e1341b74",
        "vendor": {
          "name": "IBM"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "22c36d69-8c94-3ced-8da7-b3bb264c7a91",
        "product": {
          "name": "Db2 for Linux, UNIX and Windows"
        },
        "product_version": "9.7"
      },
      {
        "id": "aa77faa2-b565-36fd-a106-a8ff8c28fd0b",
        "product": {
          "name": "Db2 for Linux, UNIX and Windows"
        },
        "product_version": "10.5"
      },
      {
        "id": "c6d6812c-b4fc-311f-9179-3c2fe7ec7474",
        "product": {
          "name": "Db2 for Linux, UNIX and Windows"
        },
        "product_version": "11.1"
      },
      {
        "id": "e1fffc6b-1093-3a50-af70-5a7eb5799ce4",
        "product": {
          "name": "Db2 for Linux, UNIX and Windows"
        },
        "product_version": "10.1"
      }
    ]
  }
]

Source	Link
ibm	www.ibm.com/support/docview.wss
securityfocus	www.securityfocus.com/bid/107398
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/154069
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

8High risk

Vulners AI Score8

CVSS 37.8 - 8.4

CVSS 27.2

EPSS0.00066