CVE-2018-1796: High severity ibm informix dynamic database server vulnerability

Published Aug 20, 2019

Updated

IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user to load malicious libraries and gain root privileges. IBM X-Force ID: 149426.

Affected Software

12 affected components

IBM Informix Dynamic Server=12.10-fc1

IBM Informix Dynamic Server=12.10-fc10

IBM Informix Dynamic Server=12.10-fc11

IBM Informix Dynamic Server=12.10-fc12

IBM Informix Dynamic Server=12.10-fc2

IBM Informix Dynamic Server=12.10-fc3

IBM Informix Dynamic Server=12.10-fc4

IBM Informix Dynamic Server=12.10-fc5

IBM Informix Dynamic Server=12.10-fc6

IBM Informix Dynamic Server=12.10-fc7

IBM Informix Dynamic Server=12.10-fc8

IBM Informix Dynamic Server=12.10-fc9

Event History

Aug 20, 2019

CVE Published

via MITRE·06:50 PM

Data Sourced

via MITRE·06:50 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2018-1796?

CVE-2018-1796 is a vulnerability in IBM Informix Dynamic Server Enterprise Edition 12.1 that could allow a local user to load malicious libraries and gain root privileges.

What is the severity of CVE-2018-1796?

The severity of CVE-2018-1796 is high with a CVSS score of 7.8.

Which software versions are affected by CVE-2018-1796?

IBM Informix Dynamic Server Enterprise Edition 12.10 versions fc1 to fc12 are affected by CVE-2018-1796.

How can a local user exploit CVE-2018-1796?

A local user can exploit CVE-2018-1796 by loading malicious libraries to gain root privileges.

Are there any references for CVE-2018-1796?

Yes, you can find references for CVE-2018-1796 at [this IBM support page](http://www.ibm.com/support/docview.wss?uid=ibm10964987) and [IBM X-Force ID: 149426](https://exchange.xforce.ibmcloud.com/vulnerabilities/149426).