CVE-2018-1980

IBM DB2 for Linux/UNIX/Windows (including DB2 Connect Server) versions 9.7, 10.1, 10.5, and 11.1 are affected by a buffer overflow vulnerability (CVE-2018-1980) that can be exploited by an authenticated local attacker to execute arbitrary code with root privileges. IBM’s security bulletins confir...

CVE-2018-1923

CVE-2018-1923 affects IBM DB2 for Linux, UNIX and Windows (including DB2 Connect Server) across 9.7, 10.1, 10.5, and 11.1. Description: a buffer overflow vulnerability that could allow an authenticated local attacker to execute arbitrary code with high/root-equivalent privileges. Affected IBM adv...

CVE-2018-1980

IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker to execute arbitrary code on the system as root. IBM X-ForceID: 154078...

CVE-2019-4015

CVE-2019-4015 affects IBM DB2 for Linux/UNIX/Windows (including DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1, via a buffer overflow that could allow an authenticated local attacker to execute arbitrary code as root. Connected IBM bulletins also cover related CVEs (2019-4016, 2018-1980, 2018-1922...

CVE-2019-4016

CVE-2019-4016 affects IBM DB2 for Linux/UNIX/Windows (including DB2 Connect Server) across multiple DB2 code releases (9.7, 10.1, 10.5, 11.1) and is described as a buffer overflow that could allow an authenticated local attacker to execute arbitrary code as root or as the instance owner. The rela...

CVE-2019-4015: Buffer Copy without Checking Size of Input

IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker to execute arbitrary code on the system as root. IBM X-ForceID: 155893...

CVE-2018-1978: Improper Restriction of Operations within the Bounds of a Memory Buffer

IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker to execute arbitrary code on the system as root. IBM X-ForceID: 154069...

PT-2019-9761

Name of the Vulnerable Software and Affected Versions IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server versions 9.7, 10.1, 10.5, and 11.1 Description The issue is related to a buffer overflow that can potentially result in arbitrary code execution. Recommendations For versions 9.7,...

PT-2019-9760

Name of the Vulnerable Software and Affected Versions IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server versions 9.7, 10.1, 10.5, and 11.1 Description The issue is related to a buffer overflow that can potentially result in arbitrary code execution. Recommendations For versions 9.7,...

PT-2019-16843 · Ibm · Ibm Db2

Name of the Vulnerable Software and Affected Versions: IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server versions 9.7, 10.1, 10.5, and 11.1 Description: The issue is a buffer overflow that could allow an authenticated local attacker to execute arbitrary code on the system as root...

CVE-2018-1922: Improper Restriction of Operations within the Bounds of a Memory Buffer

IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, and 11.1 is affected by buffer overflow vulnerability that can potentially result in arbitrary code execution. IBM X-Force ID: 152858...

CVE-2018-1980: Improper Restriction of Operations within the Bounds of a Memory Buffer

IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker to execute arbitrary code on the system as root. IBM X-ForceID: 154078...

CVE-2019-4016: Buffer Copy without Checking Size of Input

IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker to execute arbitrary code on the system as root. IBM X-ForceID: 155894...

CVE-2018-1923: Improper Restriction of Operations within the Bounds of a Memory Buffer

IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, and 11.1 is affected by buffer overflow vulnerability that can potentially result in arbitrary code execution. IBM X-Force ID: 152859...

PT-2019-9921

Name of the Vulnerable Software and Affected Versions IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server versions 9.7, 10.1, 10.5, and 11.1 Description The issue is a buffer overflow that could allow an authenticated local attacker to execute arbitrary code on the system as root...

PT-2019-9918

Name of the Vulnerable Software and Affected Versions IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server versions 9.7, 10.1, 10.5, and 11.1 Description The issue is a buffer overflow that could allow an authenticated local attacker to execute arbitrary code on the system as root...

Security Bulletin: A security vulnerability has been identified in IBM DB2 shipped with IBM Maximo Asset Management (CVE-2018-1977)

Summary IBM DB2 is shipped as a component of IBM Maximo Asset Management. Information about the security vulnerability affecting IBM DB2 has been published in a security bulletin. Vulnerability Details CVEID: CVE-2018-1977 DESCRIPTION: IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Serv...

connect-db2 (>=0.0.1, <=0.5.0), db2-wrapper (>=0.0.1, <=0.0.3) +10 more potentially affected by CVE-2016-10577 via ibm_db (>=1.0.0, <=1.0.1)

ibmdb NPM version =1.0.0, =0.0.1, =0.0.1, =2.0.0, =1.0.1, =1.0.18, =1.0.1, =1.0.1, =1.0.7, =6.0.0, =0.2.21, =0.2.24 - sails-db2 1.0.0 Source cves: CVE-2016-10577 Source advisory: OSV:GHSA-C4QP-H3M6-785F...

connect-db2 (>=0.0.1, <=0.5.0), db2-wrapper (>=0.0.1, <=0.0.3) +10 more potentially affected by CVE-2016-10577 via ibm_db (>=1.0.0, <=1.0.1)

ibmdb NPM version =1.0.0, =0.0.1, =0.0.1, =2.0.0, =1.0.1, =1.0.18, =1.0.1, =1.0.1, =1.0.7, =6.0.0, =0.2.21, =0.2.24 - sails-db2 1.0.0 Source cves: CVE-2016-10577 Source advisory: GHSA-C4QP-H3M6-785F...

Security Bulletin: A vulnerability in IBM Java SDK and IBM Java Runtime affects IBM® Db2®.

Summary There is a vulnerability in IBM® Runtime Environment Java™ Version 6.0.16.70 and earlier, 6.1.8.70 and earlier, 7.0.10.30 and earlier, 7.1.4.30 and earlier, 8.0.5.22 and earlier used by IBM® Db2®. This issue was disclosed as part of the IBM Java SDK updates in October 2018. Vulnerability...