Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.8
CVE-2018-1544: IBM DB2 local user could gain DB2 admin rights
CVE-2018-1544 · published 8 years ago
Summary
On IBM DB2 versions 9.7 through 11.1, a user who already has access to the server could exploit a coding mistake to increase their privileges to the DB2 instance owner. This could let them perform actions reserved for the database administrator. Apply the latest IBM patches or updates to close the problem.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| ibm | db2 |
9.7 10.1 10.5 11.1 cpe:2.3:a:ibm:db2:9.7:*:*:*:*:*:*:* |
Original advisory text
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local user to overflow a buffer which may result in a privilege escalation to the DB2 insta...
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local user to overflow a buffer which may result in a privilege escalation to the DB2 instance owner. IBM X-Force ID: 142648.
References
- http://www.ibm.com/support/docview.wss?uid=swg22016143 Vendor Advisory
- http://www.securitytracker.com/id/1040967 Third Party Advisory VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/142648 VDB Entry Vendor Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Type
CWE-119Buffer Overflow
Timeline
Published25 May 2018
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2018-1544 · NVD
Track software like this
Free during beta