CVE-2018-1450: Medium severity IBM DB2 vulnerability

Published May 25, 2018

Updated

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 contains a vulnerability that could allow a local user to overwrite arbitrary files owned by the DB2 instance owner. IBM X-Force ID: 140045.

Affected Software

6 affected components

IBM DB2=9.7

IBM DB2=10.1

IBM DB2=10.5

IBM DB2=11.1

Linux Linux kernel

Microsoft Windows

Event History

May 25, 2018

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-1450?

CVE-2018-1450 is classified as a high severity vulnerability due to its potential impact on local file overwriting.

How do I fix CVE-2018-1450?

To fix CVE-2018-1450, it is recommended to upgrade to a patched version of IBM DB2 that addresses this vulnerability.

Who is affected by CVE-2018-1450?

CVE-2018-1450 affects local users of IBM DB2 for Linux, UNIX, and Windows versions 9.7, 10.1, 10.5, and 11.1.

What can an attacker achieve with CVE-2018-1450?

An attacker exploiting CVE-2018-1450 can overwrite arbitrary files that are owned by the DB2 instance owner, potentially leading to data loss or system compromise.

Is CVE-2018-1450 exploitable remotely?

CVE-2018-1450 is not a remote vulnerability; it requires local access to the system to exploit.