CVE-2017-1677: High severity ibm db2 universal database vulnerability

Published Mar 22, 2018

Updated

IBM Data Server Driver for JDBC and SQLJ (IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1) deserializes the contents of /tmp/connlicj.bin which leads to object injection and potentially arbitrary code execution depending on the classpath. IBM X-Force ID: 133999.

Affected Software

6 affected components

IBM DB2=9.7

IBM DB2=10.1

IBM DB2=10.5

IBM DB2=11.1

Linux Linux kernel

Microsoft Windows

Event History

Mar 22, 2018

CVE Published

via MITRE·12:00 PM

Data Sourced

via MITRE·12:00 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2017-1677?

CVE-2017-1677 has a high severity rating due to its potential for object injection and arbitrary code execution.

How do I fix CVE-2017-1677?

To mitigate CVE-2017-1677, it is recommended to update the IBM Data Server Driver for JDBC and SQLJ to the latest version provided by IBM.

What versions of IBM DB2 are affected by CVE-2017-1677?

CVE-2017-1677 affects IBM DB2 versions 9.7, 10.1, 10.5, and 11.1.

Can CVE-2017-1677 be exploited remotely?

Yes, CVE-2017-1677 can potentially be exploited remotely if the vulnerable software is exposed to untrusted input.

What impact does CVE-2017-1677 have on system security?

The impact of CVE-2017-1677 may include unauthorized access, data manipulation, and execution of arbitrary code in the affected environment.