IBM Db2 vulnerabilities

The scalar-function implementation in IBM DB2 versions 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX, and Windows allows remote attackers to cause a denial of service or execute arbitrary code via unspecified vectors.

IBM DB2 has a stack-based buffer overflow affecting versions 9.7 through FP9a, 9.8 through FP5, 10.1 through FP4, and 10.5 before FP4 on Linux, UNIX, and Windows. This allows remote authenticated users to execute arbitrary code via a crafted ALTER MODULE statement.

Multiple untrusted search path vulnerabilities in setuid and setgid programs in IBM DB2 9.5, 9.7 before FP9a, 9.8, 10.1 before FP3a, and 10.5 before FP3a on Linux and UNIX allow local users to gain root privileges via a Trojan horse library.

The Stored Procedure infrastructure in IBM DB2 versions 9.5, 9.7 before FP9a, 10.1 before FP3a, and 10.5 before FP3a on Windows allows remote authenticated users to gain privileges by leveraging the CONNECT privilege and the CREATE_EXTERNAL_ROUTINE authority.

IBM Db2 versions 11.5.0 through 11.5.9 and 12.1.0 through 12.1.4 are vulnerable to remote code execution due to improper handling of DRDA handshake before authentication.

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow a local attacker to cause a denial of service due to improper input validation.

IBM Db2 versions 11.5.0 through 11.5.9 and 12.1.0 through 12.1.5 are vulnerable to a denial of service when executing a specially crafted query with a Materialized Query Table.

IBM Db2 versions 11.5.0 through 11.5.9 and 12.1.0 through 12.1.5 are vulnerable to a local privilege escalation via the db2pd utility.

IBM Db2 versions 11.5.0 through 11.5.9 and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (including DB2 Connect Server) could allow a remote authenticated attacker to obtain sensitive information due to improper authorization when using the CREATE WRAPPER command.

IBM Db2 versions 11.5.0 through 11.5.9 and 12.1.0 through 12.1.5 is vulnerable to a denial of service when inserting into a table with XML columns under specific conditions. The vulnerability can lead to service unavailability.

IBM Db2 versions 11.5.0 through 11.5.9 and 12.1.0 through 12.1.5 is vulnerable to privilege escalation when db2locssh is enabled with the db2 instance. The flaw allows an attacker to gain elevated privileges on the system.

IBM Db2 versions 11.5.0 through 11.5.9 and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (including DB2 Connect Server) could allow a local attacker to gain elevated privileges due to improper privilege management.

IBM Db2 versions 11.5.0-11.5.9 and 12.1.0-12.1.5 for Linux, UNIX, and Windows (including DB2 Connect Server) may allow a remote authenticated attacker to cause a denial of service due to uncontrolled resource consumption.

IBM Db2 versions 11.5.0-11.5.9 and 12.1.0-12.1.5 for Linux, UNIX, and Windows (including DB2 Connect Server) may allow a remote authenticated attacker to cause a denial of service due to a null pointer dereference.

IBM Db2 versions 11.5.0 through 11.5.9 and 12.1.0 through 12.1.5 contain improper validation of file paths. A remote attacker could exploit this to perform an arbitrary file write.

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a denial of service where a specific functionality on a Db2 server can be disabled by a privileged user under certain conditions.

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow an attacker with the ability to control or impersonate a DRDA server endpoint to execute arbitrary commands on Db2 clients due to a stack-based buffer overflow that improperly copies user-controlled data into a fixed-size stack buffer without bounds checking.

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow an authenticated user to send a specially crafted request to write arbitrary files on the system.

IBM Db2 versions 11.5.0 through 11.5.9 and 12.1.0 through 12.1.5 are vulnerable to buffer overflow in the IXF IMPORT parser.

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a local attacker to obtain sensitive information due to the logging of plain text passwords in trace files.

IBM Db2 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a local attacker to cause a denial of service due to a memory leak.

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is affected by an improper authorization vulnerability in a certain command, allowing a non-privileged user to bypass authority checks and modify database catalog data.

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to privilege escalation with a specially crafted query.

IBM Db2 federated server is vulnerable to a denial of service when running non-fenced federated queries.

IBM Db2 versions 11.5.0 through 11.5.9 and 12.1.0 through 12.1.4 are vulnerable to a buffer overflow in the setgid helper db2flacc. This could allow a local attacker to execute code with elevated privileges.

A vulnerability in IBM Db2 causes a trap when compiling specially crafted statements with subqueries, leading to a denial of service.

IBM Db2 versions 11.5.0-11.5.9 and 12.1.0-12.1.4 are vulnerable to remote code execution when the JDBC URL is under user control.

IBM Db2 versions 11.5.0 through 11.5.9 and 12.1.0 through 12.1.4 for Linux, UNIX, and Windows (including Db2 Connect Server) contain a denial-of-service vulnerability. An authenticated user can exploit improper neutralization of special elements in the data query logic for XMLTable-derived columns, causing a denial of service.

A vulnerability in IBM Db2 allows an authenticated user to read sensitive information from monitoring and event tables. It affects versions 11.5.0 through 11.5.9 and 12.1.0 through 12.1.4 on Linux, UNIX, and Windows.

A vulnerability in IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data versions 4.8, 5.0, 5.1, 5.2, and 5.3 allows an authenticated user to bypass client-side validation and manipulate input data using man-in-the-middle techniques.

A vulnerability in IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data versions 4.8, 5.0, 5.1, 5.2, 5.3 could allow a privileged user to perform operations and obtain sensitive information outside of their authority due to improper token validation.

A vulnerability in IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data versions 4.8, 5.0, 5.1, 5.2, 5.3 allows an authenticated user to cause a denial of service when creating new databases due to improper resource allocation.

IBM Db2 versions 11.5.0-11.5.9 and 12.1.0-12.1.4 for Linux, UNIX and Windows stores potentially sensitive information in log files. A local user can read these files.

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow an authenticated user to cause a denial of service using a specially crafted SQL query due to improper allocation of system resources.

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow an authenticated user to cause a denial of service due to improper neutralization of special elements in data query logic when certain configurations exist.

IBM Db2 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes Db2 Connect Server) under specific configurations could allow a local user to execute malicious code that escalate their privileges to root due to execution of unnecessary privileges operated at a higher than minimum level.

IBM Db2 versions 12.1.0 through 12.1.2 for Linux, UNIX, and Windows (including Db2 Connect Server) could allow a local user to cause a denial of service due to improper neutralization of special elements in data query logic.

IBM Db2 11.5.0-11.5.9 and 12.1.0-12.1.3 for Linux, UNIX and Windows (including DB2 Connect Server) can allow a local user to cause a denial of service due to the database monitor script incorrectly detecting that the instance is still starting under specific conditions.

The clpplus command in IBM Db2 for Linux, UNIX, and Windows exposes user credentials to the terminal, which could be obtained by a third party with physical access to the system.

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow an authenticated user to cause a denial of service due to improper allocation of resources.

IBM Db2 10.5.0 through 10.5.11, 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow an authenticated user to cause a denial due to the improper release of resources after use.

IBM Db2 versions 10.5.0 through 10.5.11, 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux could allow an authenticated user to regain access after account lockout due to password use after expiration date. This means the account lockout mechanism does not properly enforce password expiration.

IBM Db2 versions 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (including Db2 Connect Server) is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query.

IBM Db2 for Linux, UNIX, and Windows (including Db2 Connect Server) is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query.