CVE-2017-1451: High severity ibm db2 universal database vulnerability
IBM DB2 for Linux, UNIX and Windows 9.7, 10,1, 10.5, and 11.1 (includes DB2 Connect Server) could allow a local user with DB2 instance owner privileges to obtain root access. IBM X-Force ID: 128178.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-1451?
CVE-2017-1451 is rated as high severity due to the potential for local users to obtain root access.
How do I fix CVE-2017-1451?
To fix CVE-2017-1451, apply the recommended patches or updates provided by IBM for the affected DB2 versions.
Who is affected by CVE-2017-1451?
CVE-2017-1451 affects local users with DB2 instance owner privileges on IBM DB2 versions 9.7, 10.1, 10.5, and 11.1.
What can an attacker do with CVE-2017-1451?
An attacker exploiting CVE-2017-1451 can gain root privileges on the system, leading to unauthorized access and manipulation of data.
Is CVE-2017-1451 related to IBM DB2 Connect?
Yes, CVE-2017-1451 also affects IBM DB2 Connect versions that correspond to the impacted DB2 versions.