Published: 27/06/2017 Updated: 12/08/2017

CVSS v2 Base Score: 4.4 | Impact Score: 6.4 | Exploitability Score: 3.4

CVSS v3 Base Score: 7.3 | Impact Score: 5.9 | Exploitability Score: 1.3

VMScore: 445

Vector: AV:L/AC:M/Au:N/C:P/I:P/A:P

IBM DB2 for Linux, UNIX and Windows 9.2, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) is vulnerable to a stack-based buffer overflow, caused by improper bounds checking which could allow a local malicious user to execute arbitrary code. IBM X-Force ID: 125159.

Vulnerable Product	Search on Vulmon	Subscribe to Product
ibm db2_connect 11.1.0.0
ibm db2_connect 9.7
ibm db2 10.5
ibm db2 9.7
ibm db2 10.1
ibm data_server_runtime_client -
ibm data_server_driver_for_odbc_and_cli -
ibm db2_connect 10.5
ibm db2_connect 10.1
ibm db2 11.1
ibm data_server_client -
ibm data_server_driver_package -

''' DefenseCode Security Advisory IBM DB2 Command Line Processor Buffer Overflow Advisory ID: DC-2017-04-002 Advisory Title: IBM DB2 Command Line Processor Buffer Overflow Advisory URL: wwwdefensecodecom/advisories/IBM_DB2_Command_Line_Processor_Buffer_Overflowpdf Software: IBM DB2 Version: V97, V101, V105 and V111 on ...

CWE-119 https://exchange.xforce.ibmcloud.com/vulnerabilities/125159 http://www.ibm.com/support/docview.wss?uid=swg22004878 http://www.securityfocus.com/bid/99271 http://www.securitytracker.com/id/1038772 https://www.exploit-db.com/exploits/42260/https://nvd.nist.gov https://www.exploit-db.com/exploits/42260/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2017-1297

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect