CVE-2018-1451: Medium severity ibm db2 universal database vulnerability

Published May 25, 2018

Updated

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 contains a vulnerability that could allow a local user to overwrite arbitrary files owned by the DB2 instance owner. IBM X-Force ID: 140046.

Affected Software

6 affected components

IBM DB2=9.7

IBM DB2=10.1

IBM DB2=10.5

IBM DB2=11.1

Linux Linux kernel

Microsoft Windows

Event History

May 25, 2018

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-1451?

CVE-2018-1451 has a medium severity level due to its potential to allow local users to overwrite critical files.

How do I fix CVE-2018-1451?

To fix CVE-2018-1451, ensure that you apply the latest security patches provided by IBM for the affected DB2 versions.

Who is affected by CVE-2018-1451?

CVE-2018-1451 affects IBM DB2 versions 9.7, 10.1, 10.5, and 11.1 on Linux, UNIX, and Windows platforms.

What type of attack does CVE-2018-1451 enable?

CVE-2018-1451 enables local users to perform unauthorized file overwrites, which could lead to further exploitation.

Is there a workaround for CVE-2018-1451?

A temporary workaround for CVE-2018-1451 involves restricting local user access to the DB2 instance environment.