7.5

CVE-2011-0731

Buffer overflow in the DB2 Administration Server (DAS) component in IBM DB2 9.1 before FP10, 9.5 before FP7, and 9.7 before FP3 on Linux, UNIX, and Windows allows remote attackers to execute arbitrary code via unspecified vectors.

Data is provided by the National Vulnerability Database (NVD)
IbmDb2 Updatefp9 Version <= 9.1
IbmDb2 Version9.1
IbmDb2 Version9.1 Updatefp1
IbmDb2 Version9.1 Updatefp2
IbmDb2 Version9.1 Updatefp2a
IbmDb2 Version9.1 Updatefp3
IbmDb2 Version9.1 Updatefp3a
IbmDb2 Version9.1 Updatefp4
IbmDb2 Version9.1 Updatefp4a
IbmDb2 Version9.1 Updatefp5
IbmDb2 Version9.1 Updatefp6
IbmDb2 Version9.1 Updatefp6a
IbmDb2 Version9.1 Updatefp7
IbmDb2 Version9.1 Updatefp7a
IbmDb2 Version9.1 Updatefp8
IbmDb2 Updatefp6a Version <= 9.5
IbmDb2 Version9.5
IbmDb2 Version9.5 Updatefp1
IbmDb2 Version9.5 Updatefp2
IbmDb2 Version9.5 Updatefp2a
IbmDb2 Version9.5 Updatefp3
IbmDb2 Version9.5 Updatefp3a
IbmDb2 Version9.5 Updatefp3b
IbmDb2 Version9.5 Updatefp4
IbmDb2 Version9.5 Updatefp4a
IbmDb2 Version9.5 Updatefp5
IbmDb2 Version9.5 Updatefp6
IbmDb2 Updatefp2 Version <= 9.7
IbmDb2 Version9.7
IbmDb2 Version9.7 Updatefp1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 9.98% 0.927
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.