Vulnerability Details CVE-2017-1105
IBM DB2 for Linux, UNIX and Windows 9.2, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) is vulnerable to a buffer overflow that could allow a local user to overwrite DB2 files or cause a denial of service. IBM X-Force ID: 120668.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 20.7%
CVSS Severity
CVSS v3 Score 7.1
CVSS v2 Score 3.6
References
- http://www.ibm.com/support/docview.wss?uid=swg22003877
- http://www.securityfocus.com/bid/99264
- http://www.securitytracker.com/id/1038773
- https://exchange.xforce.ibmcloud.com/vulnerabilities/120668
- http://www.ibm.com/support/docview.wss?uid=swg22003877
- http://www.securityfocus.com/bid/99264
- http://www.securitytracker.com/id/1038773
- https://exchange.xforce.ibmcloud.com/vulnerabilities/120668
Products affected by CVE-2017-1105
-
cpe:2.3:a:ibm:data_server_client:-
-
cpe:2.3:a:ibm:data_server_driver_for_odbc_and_cli:-
-
cpe:2.3:a:ibm:data_server_driver_package:-
-
cpe:2.3:a:ibm:data_server_runtime_client:-
-
cpe:2.3:a:ibm:db2:10.1
-
cpe:2.3:a:ibm:db2:10.5
-
cpe:2.3:a:ibm:db2:11.1
-
cpe:2.3:a:ibm:db2:9.7
-
cpe:2.3:a:ibm:db2_connect:10.1
-
cpe:2.3:a:ibm:db2_connect:10.5
-
cpe:2.3:a:ibm:db2_connect:11.1.0.0
-
cpe:2.3:a:ibm:db2_connect:9.7
-
cpe:2.3:o:linux:linux_kernel:-
-
cpe:2.3:o:microsoft:windows:-