Security Bulletin: IBM® DB2® LUW on AIX and Linux Affected by vulnerabilities in zlib (CVE-2016-9840, CVE-2016-9841, CVE-2016-9842, CVE-2016-9843).

Summary IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server is affected by vulnerabilities in zlib. Vulnerability Details CVEID: CVE-2016-9840 DESCRIPTION: zlib is vulnerable to a denial of service, caused by an out-of-bounds pointer arithmetic in inftrees.c. By persuading a victim to...

Security Bulletin: IBM® Db2® sensitive information exposure in the error log (CVE-2017-1434).

Summary When a version check to upgrade Db2 to v11.x fails, the connection string is written in the clear in an error message to db2diag.log. Vulnerability Details CVEID: CVE-2017-1434 DESCRIPTION: IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server under unusual circumstances, could...

Security Bulletin: Privilege escalation in IBM® Db2® via loading libraries from untrusted path (CVE-2018-1487).

Summary Db2 loads shared libraries from an untrusted path potentially giving low privilege user full access to the DB2 instance account by loading a malicious shared library. All instance owner executables that run with elevated privileges setuid are affected. Root setuid executables are not...

Security Bulletin: Format string vulnerability in IBM® Db2® tool db2support (CVE-2018-1566).

Summary Db2 tool db2support is affected by format string vulnerability. As installed this tool does not run with elevated privileges setuid and when called directly the vulnerability does not lead to privilege escalation. However, if a customer’s own application or script runs with elevated...

Security Bulletin: Multiple vulnerabilities in IBM® Db2® affects IBM Security Key Lifecycle Manager.

Summary There are multiple vulnerabiltities in the IBM® Db2® that is shipped with IBM Security Key Lifecycle Manager. These issues were disclosed as part of the IBM® Db2® updates published. These may affect some configurations of IBM Security Key Lifecycle Manager. Vulnerability Details Please...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK and IBM Java Runtime affect IBM® Db2®

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 6.0.16.60 and earlier, 6.1.8.60 and earlier, 7.0.10.20 and earlier, 7.1.4.20 and earlier, 8.0.5.10 and earlier used by IBM® Db2®. These issues were disclosed as part of the IBM Java SDK updates in April 2018...

Security Bulletin: IBM® Db2® performs unsafe deserialization in DB2 JDBC driver (CVE-2017-1677)

Summary The Db2 JDBC driver deserializes an object unsafely potentially leading to arbitrary code execution. Vulnerability Details CVEID: CVE-2017-1677 DESCRIPTION: IBM Data Server Driver for JDBC and SQLJ deserializes the contents of /tmp/connlicj.bin which leads to object injection and...

Security Bulletin: Vulnerability in OpenSSL affects FlashCopy Manager shipped with IBM® Db2® LUW (CVE-2017-3738, CVE-2017-3737).

Summary Security vulnerabilities have been identified in OpenSSL that affect IBM Tivoli Storage FlashCopy Manager FCM shipped as a component of IBM Db2. Vulnerability Details CVEID: CVE-2017-3738 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information, caused by an...

Security Bulletin: IBM® Db2® is vulnerable to an unauthorized command that allows the database to be activated when authentication type is CLIENT (CVE-2017-1520)

Summary For a CLIENT authentication type, a user without proper authority can activate database. The database becomes activated, but requires authentication to proceed further. This does not allow unauthorized access to the database. This issue applies to the application side. Vulnerability Detai...

Security Bulletin: IBM® Db2® is affected by denial of service vulnerability in the Db2 Connect Server (CVE-2017-1519)

Summary IBM Db2 contains a denial of service vulnerability. A remote user can cause disruption of service for Db2 Connect Server setup with a particular configuration using SSL and an alternate gateway setup. Vulnerability Details CVEID: CVE-2017-1519 DESCRIPTION: IBM Db2 contains a denial of...

Security Bulletin: IBM® Db2® vulnerability allows local user to overwrite Db2 files. (CVE-2017-1452)

Summary A vulnerability in IBM Db2 could allow a local user to obtain elevated privilege and overwrite Db2 files. Vulnerability Details CVEID: CVE-2017-1452 DESCRIPTION: IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server could allow a local user to obtain elevated privilege and...

Security Bulletin: Privilege escalation vulnerabilities affect IBM® Db2® (CVE-2017-1438)

Summary Vulnerabilities in IBM Db2 could allow a local user to gain elevated privilege. Vulnerability Details CVEID: CVE-2017-1438 DESCRIPTION: IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server could allow a local user with DB2 instance owner privileges to obtain root access. CVSS...

Security Bulletin: Privilege escalation vulnerabilities affect IBM® Db2® (CVE-2017-1439, CVE-2017-1451)

Summary Vulnerabilities in IBM Db2 could allow a local user to gain elevated privilege. Vulnerability Details CVEID: CVE-2017-1439 DESCRIPTION: IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server could allow a local user with DB2 instance owner privileges to obtain root access. CVSS...

Security Bulletin: Under specific circumstances IBM® Db2® installation creates users with a weak password hashing algorithm (CVE-2017-1571).

Summary When installed in Silent mode Db2 creates users with a weak password hashing algorithm, which results in only the first 8 characters of the supplied password being used, and remaining characters being ignored. This does not happen if existing users are used during installation; it only...

Security Bulletin: IBM® Db2® vulnerability allows local user to overwrite Db2 files (CVE-2018-1448)

Summary A vulnerability in IBM Db2 could allow a local user to obtain elevated privilege and overwrite Db2 files. Vulnerability Details CVEID: CVE-2018-1448 DESCRIPTION: IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server contains a vulnerability that could allow a local user to...

Security Bulletin: IBM® Db2® is affected by multiple vulnerabilities in the GSKit library

Summary Db2 is affected by multiple vulnerabilities in the GSKit library. Vulnerability Details CVEID: CVE-2016-0702 DESCRIPTION: OpenSSL could allow a local attacker to obtain sensitive information, caused by a side-channel attack against a system based on the Intel Sandy-Bridge microarchitectur...

Security Bulletin: IBM® Db2® is affected by multiple file overwrite vulnerabilities (CVE-2018-1450, CVE-2018-1449, CVE-2018-1451, CVE-2018-1452)

Summary Db2 is affected by multiple file overwrite vulnerabilities. An unprivileged user can overwrite arbitrary files by creating a symlink that points to a file owned by the Db2 instance account. Vulnerability Details CVEID: CVE-2018-1450 DESCRIPTION: IBM DB2 for Linux, UNIX and Windows include...

Security Bulletin: Buffer overflow in IBM® Db2® tool db2licm (CVE-2018-1488).

Summary The Db2 tool db2licm is vulnerable to buffer overflow. Vulnerability Details CVEID: CVE-2018-1488 DESCRIPTION: IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server is vulnerable to a buffer overflow, which could allow an authenticated local attacker to execute arbitrary code on...

Security Bulletin: Buffer overflow in the db2convert tool shipped with IBM® Db2® (CVE-2018-1515).

Summary The Db2 tool db2convert is affected by a buffer overflow vulnerability. As installed this tool does not run with elevated privileges setuid and when called directly the vulnerability does not lead to privilege escalation. However, if a customer’s own application or script runs with elevat...

Security Bulletin: Multiple vulnerabilities affect db2exmig and db2exfmt tools shipped with IBM® Db2® (CVE-2018-1544, CVE-2018-1565)

Summary The Db2 tools db2exmig and db2exfmt are affected by a buffer overflow vulnerability. As installed these tools do not run with elevated privileges setuid and when called directly the vulnerability does not lead to privilege escalation. However, if a customer’s own application or script run...