CVE-2018-1427: Buffer Overflow
Published Mar 22, 2018
·Updated
IBM GSKit (IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1) contains several environment variables that a local attacker could overflow and cause a denial of service. IBM X-Force ID: 139072.
Affected Software
6 affected components
IBM DB2=9.7
IBM DB2=10.1
IBM DB2=10.5
IBM DB2=11.1
Linux Linux kernel
Microsoft Windows
Event History
Mar 22, 2018
CVE Published
via MITRE·12:00 PM
Data Sourced
via MITRE·12:00 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2018-1427?
CVE-2018-1427 has a medium severity rating as it may lead to a denial of service due to local attacker exploitation.
2
How do I fix CVE-2018-1427?
To fix CVE-2018-1427, update to an IBM DB2 version that addresses this vulnerability.
3
What versions of IBM DB2 are affected by CVE-2018-1427?
CVE-2018-1427 affects IBM DB2 versions 9.7, 10.1, 10.5, and 11.1.
4
Is CVE-2018-1427 exploitable remotely?
No, CVE-2018-1427 is exploitable only by local attackers with access to the system.
5
What can be the impact of exploiting CVE-2018-1427?
Exploiting CVE-2018-1427 can result in a denial of service condition on the affected systems.