Security Bulletin: Multiple security vulnerabilities have been identified in IBM Db2 shipped with Predictive Maintenance and Quality (CVE-2018-1936, CVE-2019-4014)

Summary

IBM DB2 is shipped with Predictive Maintenance and Quality. Information about a security vulnerability affecting IBM DB2 has been published in a security bulletin.
(CVE-2018-1936, CVE-2019-4014)

Vulnerability Details

Refer to the security bulletins listed in the Remediation/Fixes section

Affected Products and Versions

Predictive Maintenance and Quality 2.5.3 – 2.6.2

Remediation/Fixes

Refer to the following security bulletins for vulnerability details and information about fixes addressed by IBM DB2 which is shipped with Predictive Maintenance and Quality.

Principal Product and Version(s)

|

Affected Supporting Product and Version

|

Affected Supporting Product Security Bulletin

—|—|—

IBM Predictive Maintenance and Quality 2.5.3 – 2.6.2

|

IBM DB2 Enterprise Server Edition V10.5

|

Security Bulletin: IBM Db2 is vulnerable to a buffer overflow which could allow a local malicious user to execute arbitrary code (CVE-2018-1936).

Security Bulletin: IBM Db2 is vulnerable to a buffer overflow which could allow a local malicious user to execute arbitrary code (CVE-2019-4014).

Workarounds and Mitigations

None.