Unscored CVE-2017-1438 EUVD-2017-10454GHSA-cfx7-5ppw-xmfv

IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) could allow a local user with DB2 instance owne…

Published Sep 12, 2017 · Updated Sep 17, 2024 · Assigned by ibm

Vendor: IBM Product: DB2 for Linux, UNIX and Windows Platform: Linux Platform: Windows

Description

IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) could allow a local user with DB2 instance owner privileges to obtain root access. IBM X-Force ID: 128057.

Affected products

Vendor	Product	Affected	Fixed
IBM	DB2 for Linux, UNIX and Windows	10.5, 10.1, 9.7, 11.1	—

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/128057
http://www.ibm.com/support/docview.wss?uid=swg22006885
1039300 vdb-entry
100685 vdb-entry