Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qhgj-ghq2-5hjh

Опубликовано: 17 июл. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 6.7

Описание

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 with a Federated configuration is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local user with SYSADM privileges could overflow the buffer and execute arbitrary code on the system. IBM X-Force ID: 257763.

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 with a Federated configuration is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local user with SYSADM privileges could overflow the buffer and execute arbitrary code on the system. IBM X-Force ID: 257763.

EPSS

Процентиль: 5%
0.00023
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-119
CWE-121
CWE-787

Связанные уязвимости

CVSS3: 6.7
nvd
больше 2 лет назад

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 with a Federated configuration is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local user with SYSADM privileges could overflow the buffer and execute arbitrary code on the system. IBM X-Force ID: 257763.

CVSS3: 6.7
fstec
больше 2 лет назад

Уязвимость сервера Federated Server системы управления базами данных IBM DB2, позволяющая нарушителю выполнить произвольный код или вызвать отказ в обслуживании

EPSS

Процентиль: 5%
0.00023
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-119
CWE-121
CWE-787