First published: Mon Nov 05 2018(Updated: )
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local unprivileged user to overwrite files on the system which could cause damage to the database. IBM X-Force ID: 149429.
Credit: psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
IBM Db2 | =9.7 | |
IBM Db2 | =10.1 | |
IBM Db2 | =10.5 | |
IBM Db2 | =11.1 | |
Linux Kernel | ||
Microsoft Windows |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2018-1799 is considered a high severity vulnerability as it allows an unprivileged local user to potentially overwrite critical files on the system.
To fix CVE-2018-1799, users should apply the latest security patches for IBM DB2 versions 9.7, 10.1, 10.5, and 11.1.
CVE-2018-1799 affects IBM DB2 for Linux, UNIX, and Windows versions 9.7, 10.1, 10.5, and 11.1.
Exploitation of CVE-2018-1799 can lead to unauthorized file overwrites, resulting in potential data loss or corruption in the database.
CVE-2018-1799 impacts IBM DB2 regardless of whether it is running on Linux or Windows operating systems.