Vulnerability Details CVE-2017-1297
IBM DB2 for Linux, UNIX and Windows 9.2, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) is vulnerable to a stack-based buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code. IBM X-Force ID: 125159.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 49.8%
CVSS Severity
CVSS v3 Score 7.3
CVSS v2 Score 4.4
References
- http://www.ibm.com/support/docview.wss?uid=swg22004878
- http://www.securityfocus.com/bid/99271
- http://www.securitytracker.com/id/1038772
- https://exchange.xforce.ibmcloud.com/vulnerabilities/125159
- https://www.exploit-db.com/exploits/42260/
- http://www.ibm.com/support/docview.wss?uid=swg22004878
- http://www.securityfocus.com/bid/99271
- http://www.securitytracker.com/id/1038772
- https://exchange.xforce.ibmcloud.com/vulnerabilities/125159
- https://www.exploit-db.com/exploits/42260/
Products affected by CVE-2017-1297
-
cpe:2.3:a:ibm:data_server_client:-
-
cpe:2.3:a:ibm:data_server_driver_for_odbc_and_cli:-
-
cpe:2.3:a:ibm:data_server_driver_package:-
-
cpe:2.3:a:ibm:data_server_runtime_client:-
-
cpe:2.3:a:ibm:db2:10.1
-
cpe:2.3:a:ibm:db2:10.5
-
cpe:2.3:a:ibm:db2:11.1
-
cpe:2.3:a:ibm:db2:9.7
-
cpe:2.3:a:ibm:db2_connect:10.1
-
cpe:2.3:a:ibm:db2_connect:10.5
-
cpe:2.3:a:ibm:db2_connect:11.1.0.0
-
cpe:2.3:a:ibm:db2_connect:9.7
-
cpe:2.3:o:linux:linux_kernel:-
-
cpe:2.3:o:microsoft:windows:-