First published: Fri May 25 2018(Updated: )
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local user to overflow a buffer which may result in a privilege escalation to the DB2 instance owner. IBM X-Force ID: 143022.
Credit: psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
IBM Db2 | =9.7 | |
IBM Db2 | =10.1 | |
IBM Db2 | =10.5 | |
IBM Db2 | =11.1 | |
Linux Kernel | ||
Microsoft Windows |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2018-1565 has a medium severity rating due to potential privilege escalation risks for local users.
To mitigate CVE-2018-1565, ensure you apply the latest patches provided by IBM for the affected Db2 versions.
CVE-2018-1565 affects local users of IBM Db2 versions 9.7, 10.1, 10.5, and 11.1 on Linux, UNIX, and Windows platforms.
The potential impact of CVE-2018-1565 includes privilege escalation to the DB2 instance owner, which may compromise system security.
CVE-2018-1565 was disclosed in July 2018 as part of IBM's security advisories.