CVE-2019-4448: High severity ibm db2 high performance unload vulnerability
IBM DB2 High Performance Unload load for LUW 6.1, 6.1.0.1, 6.1.0.1 IF1, 6.1.0.2, 6.1.0.2 IF1, and 6.1.0.1 IF2 db2hpum and db2hpumdebug binaries are setuid root and have built-in options that allow an low privileged user the ability to load arbitrary db2 libraries from a privileged context. This results in arbitrary code being executed with root authority. IBM X-Force ID: 163489.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2019-4448?
The severity of CVE-2019-4448 is high with a severity value of 7.8.
What is the affected software for CVE-2019-4448?
The affected software for CVE-2019-4448 is IBM DB2 High Performance Unload load versions 6.1, 6.1.0.1, 6.1.0.1 IF1, 6.1.0.2, 6.1.0.2 IF1, and 6.1.0.1 IF2.
What are the references for CVE-2019-4448?
The references for CVE-2019-4448 are: IBM support documentation (http://www.ibm.com/support/docview.wss?uid=ibm10964592) and IBM X-Force (https://exchange.xforce.ibmcloud.com/vulnerabilities/163489).
What is the Common Weakness Enumeration (CWE) for CVE-2019-4448?
The Common Weakness Enumeration (CWE) for CVE-2019-4448 is CWE-269.
How can I fix CVE-2019-4448?
To fix CVE-2019-4448, update the affected IBM DB2 High Performance Unload load versions to a patched version provided by IBM.