CVE-2017-1105 IBM DB2 for Linux, UNIX and Windows 9.2, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) is vulnerable to a buffer overflow that could allow a local user to overwrite DB2 files or cause a denial of...
HighCVSS 7.1
EPSS 0.37%
- Published
- Updated
- Exploit status
- No public exploit known
Description
IBM DB2 for Linux, UNIX and Windows 9.2, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) is vulnerable to a buffer overflow that could allow a local user to overwrite DB2 files or cause a denial of service. IBM X-Force ID: 120668.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm data server client | All versions | No fix listed |
| ibm data server driver for odbc and cli | All versions | No fix listed |
| ibm data server driver package | All versions | No fix listed |
| ibm data server runtime client | All versions | No fix listed |
| ibm db2 | = 9.7 | No fix listed |
| ibm db2 | = 10.1 | No fix listed |
| ibm db2 | = 10.5 | No fix listed |
| ibm db2 | = 11.1 | No fix listed |
| ibm db2 connect | = 9.7 | No fix listed |
| ibm db2 connect | = 10.1 | No fix listed |
| ibm db2 connect | = 10.5 | No fix listed |
| ibm db2 connect | = 11.1.0.0 | No fix listed |
| ibm Db2 for Linux, UNIX and Windows | = 10.5 | No fix listed |
| ibm Db2 for Linux, UNIX and Windows | = 10.1 | No fix listed |
| ibm Db2 for Linux, UNIX and Windows | = 9.7 | No fix listed |
| ibm Db2 for Linux, UNIX and Windows | = 11.1 | No fix listed |
References
- www.ibm.com patch vendor-advisory
- 99264 third-party-advisory vdb-entry
- 1038773 vdb-entry
- exchange.xforce.ibmcloud.com vendor-advisory