Ibm

Db2

355 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.1

CVE-2018-1448

  • EPSS 0.38%
  • Veröffentlicht 22.03.2018 12:29:00
  • Zuletzt bearbeitet 21.11.2024 03:59:50

IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) contains a vulnerability that could allow a local user to overwrite arbitrary files owned by the DB2 instance owner. IBM X-Force ID: 140043.

6.5

CVE-2016-0215

  • EPSS 1.57%
  • Veröffentlicht 16.01.2018 19:29:00
  • Zuletzt bearbeitet 21.11.2024 02:41:17

IBM DB2 9.7, 10.1 before FP6, and 10.5 before FP8 on AIX, Linux, HP, Solaris and Windows allow remote authenticated users to cause a denial of service (daemon crash) via a SELECT statement with a subquery containing the AVG OLAP function on an Oracle...

4.7

CVE-2017-1434

  • EPSS 0.34%
  • Veröffentlicht 12.09.2017 21:29:00
  • Zuletzt bearbeitet 13.05.2026 00:24:29

IBM DB2 for Linux, UNIX and Windows 11.1 (includes DB2 Connect Server) under unusual circumstances, could expose highly sensitive information in the error log to a local user.

7.2

CVE-2017-1438

  • EPSS 0.38%
  • Veröffentlicht 12.09.2017 21:29:00
  • Zuletzt bearbeitet 13.05.2026 00:24:29

IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) could allow a local user with DB2 instance owner privileges to obtain root access. IBM X-Force ID: 128057.

7.2

CVE-2017-1439

  • EPSS 0.38%
  • Veröffentlicht 12.09.2017 21:29:00
  • Zuletzt bearbeitet 13.05.2026 00:24:29

IBM DB2 for Linux, UNIX and Windows 9.7, 10,1, 10.5, and 11.1 (includes DB2 Connect Server) could allow a local user with DB2 instance owner privileges to obtain root access. IBM X-Force ID: 128058.

7.8

CVE-2017-1451

  • EPSS 0.37%
  • Veröffentlicht 12.09.2017 21:29:00
  • Zuletzt bearbeitet 13.05.2026 00:24:29

IBM DB2 for Linux, UNIX and Windows 9.7, 10,1, 10.5, and 11.1 (includes DB2 Connect Server) could allow a local user with DB2 instance owner privileges to obtain root access. IBM X-Force ID: 128178.

7.8

CVE-2017-1452

  • EPSS 0.37%
  • Veröffentlicht 12.09.2017 21:29:00
  • Zuletzt bearbeitet 13.05.2026 00:24:29

IBM DB2 for Linux, UNIX and Windows 9.7, 10,1, 10.5, and 11.1 (includes DB2 Connect Server) could allow a local user to obtain elevated privilege and overwrite DB2 files. IBM X-Force ID: 128180.

5.9

CVE-2017-1519

  • EPSS 1.73%
  • Veröffentlicht 12.09.2017 21:29:00
  • Zuletzt bearbeitet 13.05.2026 00:24:29

IBM DB2 10.5 and 11.1 contains a denial of service vulnerability. A remote user can cause disruption of service for DB2 Connect Server setup with a particular configuration. IBM X-Force ID: 129829.

4.3

CVE-2017-1520

  • EPSS 1.31%
  • Veröffentlicht 12.09.2017 21:29:00
  • Zuletzt bearbeitet 13.05.2026 00:24:29

IBM DB2 9.7, 10,1, 10.5, and 11.1 is vulnerable to an unauthorized command that allows the database to be activated when authentication type is CLIENT. IBM X-Force ID: 129830.

7.1

CVE-2017-1105

  • EPSS 0.37%
  • Veröffentlicht 27.06.2017 16:29:00
  • Zuletzt bearbeitet 13.05.2026 00:24:29

IBM DB2 for Linux, UNIX and Windows 9.2, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) is vulnerable to a buffer overflow that could allow a local user to overwrite DB2 files or cause a denial of service. IBM X-Force ID: 120668.