CVE-2017-1105
HighSummary
IBM DB2 for Linux, UNIX and Windows versions 9.2, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow that could allow a local user to overwrite DB2 files or cause a denial of service.
Risk Assessment
This vulnerability could lead to serious data integrity issues and service availability problems, threatening system stability.
Recommendation
It is recommended to update to the latest version of DB2 to mitigate this vulnerability and to monitor the system for unauthorized activities.
Other vulnerabilities in IBM DB2 for Linux, UNIX and Windows
See all- CVE-2017-1452High
IBM DB2 for Linux, UNIX and Windows versions 9.7, 10.1, 10.5, and 11.1 (including DB2 Connect Server) could allow a local user to obtain elevated privileges and overwrite DB2 files.
- CVE-2017-1451High
IBM DB2 for Linux, UNIX and Windows versions 9.7, 10.1, 10.5, and 11.1 may allow a local user with DB2 instance owner privileges to gain root access.
- CVE-2017-1297High
IBM DB2 for Linux, UNIX and Windows versions 9.2, 10.1, 10.5, and 11.1 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code.
- CVE-2023-35012Medium
IBM Db2 for Linux, UNIX and Windows version 11.5 with a Federated configuration is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local user with SYSADM privileges could overflow the buffer and execute arbitrary code on the system.
Original NVD description (English source)
IBM DB2 for Linux, UNIX and Windows 9.2, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) is vulnerable to a buffer overflow that could allow a local user to overwrite DB2 files or cause a denial of service. IBM X-Force ID: 120668.