CVE-2018-1448: High severity IBM DB2 vulnerability

Published Mar 22, 2018

Updated

IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) contains a vulnerability that could allow a local user to overwrite arbitrary files owned by the DB2 instance owner. IBM X-Force ID: 140043.

Affected Software

6 affected components

IBM DB2=9.7

IBM DB2=10.1

IBM DB2=10.5

IBM DB2=11.1

Linux Linux kernel

Microsoft Windows

Event History

Mar 22, 2018

CVE Published

via MITRE·12:00 PM

Data Sourced

via MITRE·12:00 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2018-1448?

CVE-2018-1448 is classified as a high severity vulnerability due to its potential to allow local users to overwrite arbitrary files.

How do I fix CVE-2018-1448?

To mitigate CVE-2018-1448, it is recommended to apply the latest IBM DB2 patches that address this vulnerability.

Who is affected by CVE-2018-1448?

CVE-2018-1448 affects IBM DB2 versions 9.7, 10.1, 10.5, and 11.1 on both Linux and Windows platforms.

What type of attack does CVE-2018-1448 enable?

CVE-2018-1448 potentially enables a local attacker to overwrite files owned by the DB2 instance owner.

Is CVE-2018-1448 an external or internal threat?

CVE-2018-1448 is considered an internal threat as it requires local access to exploit the vulnerability.