Vulnerability Details CVE-2018-1710
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.1, 10.5, and 11.1 tool db2licm is affected by buffer overflow vulnerability that can potentially result in arbitrary code execution. IBM X-Force ID: 146364.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 33.1%
CVSS Severity
CVSS v3 Score 8.4
CVSS v2 Score 4.6
References
- http://www.securityfocus.com/bid/105391
- https://exchange.xforce.ibmcloud.com/vulnerabilities/146364
- https://usn.ubuntu.com/3906-2/
- https://www.ibm.com/support/docview.wss?uid=ibm10729981
- http://www.securityfocus.com/bid/105391
- https://exchange.xforce.ibmcloud.com/vulnerabilities/146364
- https://usn.ubuntu.com/3906-2/
- https://www.ibm.com/support/docview.wss?uid=ibm10729981
Products affected by CVE-2018-1710
-
cpe:2.3:a:ibm:db2:10.1
-
cpe:2.3:a:ibm:db2:10.5
-
cpe:2.3:a:ibm:db2:11.1
-
cpe:2.3:o:linux:linux_kernel:-
-
cpe:2.3:o:microsoft:windows:-