Security Bulletin: Privilege escalation vulnerabilities affect IBM® Db2® (CVE-2017-1439, CVE-2017-1451)

Summary Vulnerabilities in IBM Db2 could allow a local user to gain elevated privilege. Vulnerability Details CVEID: CVE-2017-1439 DESCRIPTION: IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server could allow a local user with DB2 instance owner privileges to obtain root access. CVSS...

Security Bulletin: Security vulnerabilities have been identified in IBM DB2 shipped with IBM Predictive Maintenance and Quality

Summary IBM DB2 is shipped with IBM Predictive Maintenance and Quality. Information about some security vulnerabilities affecting IBM DB2 have been published their respective security bulletins. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section. Affecte...

CVE-2017-1451

IBM DB2 LUW 9.7, 10.1, 10.5, and 11.1 (including DB2 Connect Server) are affected by CVE-2017-1451. A local user with DB2 instance owner privileges could obtain root access due to a privilege-escalation flaw. Affected IBM products include DB2 LUW on Linux/Unix/Windows; several IBM security bullet...