CVE-2018-1565: Buffer Overflow

Published May 25, 2018

Updated

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local user to overflow a buffer which may result in a privilege escalation to the DB2 instance owner. IBM X-Force ID: 143022.

Affected Software

6 affected components

IBM DB2=9.7

IBM DB2=10.1

IBM DB2=10.5

IBM DB2=11.1

Linux Linux kernel

Microsoft Windows

Event History

May 25, 2018

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2018-1565?

CVE-2018-1565 has a medium severity rating due to potential privilege escalation risks for local users.

How do I mitigate CVE-2018-1565?

To mitigate CVE-2018-1565, ensure you apply the latest patches provided by IBM for the affected Db2 versions.

Who is affected by CVE-2018-1565?

CVE-2018-1565 affects local users of IBM Db2 versions 9.7, 10.1, 10.5, and 11.1 on Linux, UNIX, and Windows platforms.

What is the potential impact of CVE-2018-1565?

The potential impact of CVE-2018-1565 includes privilege escalation to the DB2 instance owner, which may compromise system security.

When was CVE-2018-1565 disclosed?

CVE-2018-1565 was disclosed in July 2018 as part of IBM's security advisories.