CVE-2018-1923: Buffer Overflow
Published Mar 11, 2019
·Updated
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is affected by buffer overflow vulnerability that can potentially result in arbitrary code execution. IBM X-Force ID: 152859.
Affected Software
6 affected components
IBM DB2=9.7
IBM DB2=10.1
IBM DB2=10.5
IBM DB2=11.1
Linux Linux kernel
Microsoft Windows
Remediation
Patch Available
Event History
Mar 11, 2019
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2018-1923?
CVE-2018-1923 has a critical severity rating due to its potential for arbitrary code execution.
2
How do I fix CVE-2018-1923?
To fix CVE-2018-1923, ensure that your IBM DB2 software is updated to the latest version as per IBM's security advisories.
3
What software versions are affected by CVE-2018-1923?
CVE-2018-1923 affects IBM DB2 versions 9.7, 10.1, 10.5, and 11.1.
4
Can CVE-2018-1923 be exploited remotely?
Yes, CVE-2018-1923 can potentially be exploited remotely, allowing attackers to execute arbitrary code.
5
What type of vulnerability is CVE-2018-1923?
CVE-2018-1923 is classified as a buffer overflow vulnerability.