CVE-2018-1685: Exposure of Sensitive Information to an Unauthorized Actor

IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, and 11.1 contains a vulnerability in db2cacpy that could allow a local user to read any file on the system. IBM X-Force ID: 145502...

CVE-2018-1711: Incorrect Permission Assignment for Critical Resource

IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, and 11.1 could allow a local user to to gain privileges due to allowing modification of columns of existing tasks. IBM X-Force ID: 146369...

PT-2018-3330

Name of the Vulnerable Software and Affected Versions: IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server versions 9.7, 10.1, 10.5, and 11.1 Description: The issue is related to errors in privilege management within the IBM DB2 database management system. Exploitation of this issue...

PT-2018-13125

Name of the Vulnerable Software and Affected Versions IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server versions 9.7, 10.1, 10.5, and 11.1 Description The issue is caused by a format string error, which could allow a local user to execute arbitrary code. Recommendations For versions...

CVE-2018-1458: Untrusted Search Path

IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10,1, 10.5 and 11.1 could allow a local user to execute arbitrary code and conduct DLL hijacking attacks. IBM X-Force ID: 140209...

Security Bulletin: IBM PowerVC - Local escalation of privilege vulnerability in DB2 for Linux (CVE-2016-5995)

Summary IBM PowerVC is impacted by Local escalation of privilege vulnerability in DB2 for Linux CVE-2016-5995 Vulnerability Details CVE-ID: CVE-2016-5995 Description: DB2 for Linux, Unix and Windows is vulnerable to a privilege escalation due to code being built with binaries with libraries in...

CVE-2018-1488: Improper Restriction of Operations within the Bounds of a Memory Buffer

IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 10.5 and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker to execute arbitrary code on the system as root. IBM X-Force ID: 140973...

PT-2018-12777

Name of the Vulnerable Software and Affected Versions IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server versions 10.5 and 11.1 Description The issue is a buffer overflow that could allow an authenticated local attacker to execute arbitrary code on the system as root. Recommendations...

PT-2018-12600

Name of the Vulnerable Software and Affected Versions IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server versions 9.7 through 11.1 Description The issue is caused by improper bounds checking, leading to a stack-based buffer overflow. This could allow an attacker to execute arbitrary...

CVE-2018-1515: Improper Restriction of Operations within the Bounds of a Memory Buffer

IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 10.5 and 11.1, under specific or unusual conditions, could allow a local user to overflow a buffer which may result in a privilege escalation to the DB2 instance owner. IBM X-Force ID: 141624...

CVE-2018-1452: Undefined Security Weakness

IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, and 11.1 contains a vulnerability that could allow a local user to overwrite arbitrary files owned by the DB2 instance owner. IBM X-Force ID: 140047...

PT-2018-12904

Name of the Vulnerable Software and Affected Versions IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server versions 10.5 and 11.1 Description The issue allows a local user to overflow a buffer, which may result in a privilege escalation to the DB2 instance owner under specific or unusu...

PT-2018-13032

Name of the Vulnerable Software and Affected Versions IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server versions 9.7 through 11.1 Description A buffer overflow issue may allow a local user to escalate privileges to the DB2 instance owner. Recommendations For versions 9.7 through 11....

CVE-2018-1544: Improper Restriction of Operations within the Bounds of a Memory Buffer

IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, and 11.1 could allow a local user to overflow a buffer which may result in a privilege escalation to the DB2 instance owner. IBM X-Force ID: 142648...

CVE-2018-1565: Improper Restriction of Operations within the Bounds of a Memory Buffer

IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, and 11.1 could allow a local user to overflow a buffer which may result in a privilege escalation to the DB2 instance owner. IBM X-Force ID: 143022...

CVE-2018-1450: Undefined Security Weakness

IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, and 11.1 contains a vulnerability that could allow a local user to overwrite arbitrary files owned by the DB2 instance owner. IBM X-Force ID: 140045...

CVE-2018-1451: Undefined Security Weakness

IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, and 11.1 contains a vulnerability that could allow a local user to overwrite arbitrary files owned by the DB2 instance owner. IBM X-Force ID: 140046...

PT-2018-5982

Name of the Vulnerable Software and Affected Versions: IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server versions 9.7, 10.1, 10.5, and 11.1 Description: The issue is related to the use of weaker than expected cryptographic algorithms, which could allow an attacker to decrypt highly...

CVE-2018-1427: Improper Restriction of Operations within the Bounds of a Memory Buffer

IBM GSKit IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1 contains several environment variables that a local attacker could overflow and cause a denial of service. IBM X-Force ID: 139072...

PT-2017-13401

Name of the Vulnerable Software and Affected Versions IBM DB2 for Linux, UNIX and Windows version 11.1 Description The issue could expose highly sensitive information in the error log to a local user under unusual circumstances. Recommendations For IBM DB2 for Linux, UNIX and Windows version 11.1...