CVE-2018-1515: Buffer Overflow

Published May 25, 2018

Updated

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.5 and 11.1, under specific or unusual conditions, could allow a local user to overflow a buffer which may result in a privilege escalation to the DB2 instance owner. IBM X-Force ID: 141624.

Affected Software

4 affected components

IBM DB2=10.5

IBM DB2=11.1

Linux Linux kernel

Microsoft Windows

Event History

May 25, 2018

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2018-1515?

CVE-2018-1515 is considered a high severity vulnerability due to its potential for privilege escalation.

How do I fix CVE-2018-1515?

To mitigate CVE-2018-1515, upgrade to a fixed version of IBM DB2, specifically versions 10.5 FP13 or 11.1 FP2 and later.

Who is affected by CVE-2018-1515?

CVE-2018-1515 affects local users of IBM DB2 for Linux, UNIX, and Windows versions 10.5 and 11.1 under specific conditions.

What are the potential impacts of CVE-2018-1515?

The primary impact of CVE-2018-1515 is unauthorized privilege escalation to the DB2 instance owner.

Is CVE-2018-1515 a local or remote vulnerability?

CVE-2018-1515 is classified as a local vulnerability, requiring local access to exploit.