CVE-2017-1297

IBM DB2 for Linux, UNIX and Windows 9.2, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) is vulnerable to a stack-based buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code. IBM X-Force ID: 125159.

Score

CVSS 3.0 7.3 High

Status

Modified - psirt@us.ibm.com

Published

2017-06-27

Last modified

2024-08-05

Weaknesses

CWE-119

Affected products

• Data Server Client (Ibm)
• Data Server Driver For Odbc And Cli (Ibm)
• Data Server Driver Package (Ibm)
• Data Server Runtime Client (Ibm)
• Db2 (Ibm)
• Db2 Connect (Ibm)
• Db2 For Linux (Ibm)
• Unix And Windows (Ibm)

References

• http://www.ibm.com/support/docview.wss?uid=swg22004878
• http://www.securityfocus.com/bid/99271
• http://www.securitytracker.com/id/1038772
• https://exchange.xforce.ibmcloud.com/vulnerabilities/125159
• https://www.exploit-db.com/exploits/42260/