CVE-2017-1105

IBM DB2 for Linux, UNIX and Windows 9.2, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) is vulnerable to a buffer overflow that could allow a local user to overwrite DB2 files or cause a denial of service. IBM X-Force ID: 120668.

Score

CVSS 3.0 7.1 High

Status

Modified - psirt@us.ibm.com

Published

2017-06-27

Last modified

2024-08-05

Weaknesses

CWE-119

Affected products

• Data Server Client (Ibm)
• Data Server Driver For Odbc And Cli (Ibm)
• Data Server Driver Package (Ibm)
• Data Server Runtime Client (Ibm)
• Db2 (Ibm)
• Db2 Connect (Ibm)
• Db2 For Linux (Ibm)
• Unix And Windows (Ibm)

References

• http://www.ibm.com/support/docview.wss?uid=swg22003877
• http://www.securityfocus.com/bid/99264
• http://www.securitytracker.com/id/1038773
• https://exchange.xforce.ibmcloud.com/vulnerabilities/120668