CVE-2018-1799: Medium severity IBM DB2 vulnerability

Published Nov 9, 2018

Updated

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local unprivileged user to overwrite files on the system which could cause damage to the database. IBM X-Force ID: 149429.

Affected Software

6 affected components

IBM DB2=9.7

IBM DB2=10.1

IBM DB2=10.5

IBM DB2=11.1

Linux Linux kernel

Microsoft Windows

Event History

Nov 9, 2018

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2018-1799?

CVE-2018-1799 is considered a high severity vulnerability as it allows an unprivileged local user to potentially overwrite critical files on the system.

How do I fix CVE-2018-1799?

To fix CVE-2018-1799, users should apply the latest security patches for IBM DB2 versions 9.7, 10.1, 10.5, and 11.1.

Who is affected by CVE-2018-1799?

CVE-2018-1799 affects IBM DB2 for Linux, UNIX, and Windows versions 9.7, 10.1, 10.5, and 11.1.

What can happen if CVE-2018-1799 is exploited?

Exploitation of CVE-2018-1799 can lead to unauthorized file overwrites, resulting in potential data loss or corruption in the database.

Is CVE-2018-1799 specific to certain operating systems?

CVE-2018-1799 impacts IBM DB2 regardless of whether it is running on Linux or Windows operating systems.