NetSight
high7.8

CVE-2019-4154

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authentica…

Impact

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker to execute arbitrary code on the system as root. IBM X-Force ID: 158519.

Affected products

VendorProductAffected versions
IbmDb2
Versions 9.7.0.0, 9.7.0.1, 9.7.0.2, 9.7.0.3, 9.7.0.4, 9.7.0.5

Weakness classification

References