Description
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.5 and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker to execute arbitrary code on the system as root. IBM X-Force ID: 140973.
CVSS breakdown
CVSS 3.0
Availability
High
Attack Complexity
Low
Attack Vector
Local
Confidentiality
High
Integrity
High
Privileges Required
None
Scope
Unchanged
User Interaction
None
E
Unchanged
RC
Changed
RL
O
Affected products
- ibm / Db2 for Linux, UNIX and Windows10.5 – 10.5
- ibm / Db2 for Linux, UNIX and Windows11.1 – 11.1