CVE-2018-1922: Buffer Overflow
First published: Mon Mar 11 2019(Updated: )
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is affected by buffer overflow vulnerability that can potentially result in arbitrary code execution. IBM X-Force ID: 152858.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM DB2 Universal Database | =9.7 | |
| IBM DB2 Universal Database | =10.1 | |
| IBM DB2 Universal Database | =10.5 | |
| IBM DB2 Universal Database | =11.1 | |
| Linux Kernel | ||
| Microsoft Windows Operating System |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2018-1922?
CVE-2018-1922 has a high severity rating due to its potential for arbitrary code execution.
How do I fix CVE-2018-1922?
To fix CVE-2018-1922, apply the latest security patches provided by IBM for the affected DB2 versions.
Which IBM DB2 versions are affected by CVE-2018-1922?
CVE-2018-1922 affects IBM DB2 versions 9.7, 10.1, 10.5, and 11.1.
Can CVE-2018-1922 lead to data breaches?
Yes, CVE-2018-1922 can potentially lead to data breaches if exploited due to arbitrary code execution.
Is there a workaround for CVE-2018-1922?
Currently, the recommended approach for CVE-2018-1922 is to update to the patched versions from IBM rather than relying on a workaround.
- agent/type
- agent/references
- agent/remedy
- agent/author
- agent/severity
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/first-publish-date
- agent/source
- agent/weakness
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/ibm
- canonical/ibm db2 universal database
- version/ibm db2 universal database/9.7
- version/ibm db2 universal database/10.1
- version/ibm db2 universal database/10.5
- version/ibm db2 universal database/11.1
- vendor/linux
- canonical/linux kernel
- vendor/microsoft
- canonical/microsoft windows operating system