CVE-2017-1297CVE-2017-1297

Affected configuration(s):

cpe:/a:ibm:data_server_client:-
cpe:/a:ibm:data_server_driver_for_odbc_and_cli:-
cpe:/a:ibm:data_server_driver_package:-
cpe:/a:ibm:data_server_runtime_client:-
cpe:/a:ibm:db2:9.7::~~advanced_enterprise~~~
cpe:/a:ibm:db2:9.7::~~advanced_workgroup~~~
cpe:/a:ibm:db2:9.7::~~enterprise~~~
cpe:/a:ibm:db2:9.7::~~express~~~
cpe:/a:ibm:db2:9.7::~~workgroup~~~
cpe:/a:ibm:db2:10.1::~~advanced_enterprise~~~
cpe:/a:ibm:db2:10.1::~~advanced_workgroup~~~
cpe:/a:ibm:db2:10.1::~~enterprise~~~
cpe:/a:ibm:db2:10.1::~~express~~~
cpe:/a:ibm:db2:10.1::~~workgroup~~~
cpe:/a:ibm:db2:10.5::~~advanced_enterprise~~~
cpe:/a:ibm:db2:10.5::~~advanced_workgroup~~~
cpe:/a:ibm:db2:10.5::~~enterprise~~~
cpe:/a:ibm:db2:10.5::~~express~~~
cpe:/a:ibm:db2:10.5::~~workgroup~~~
cpe:/a:ibm:db2:11.1::~~advanced_enterprise~~~
cpe:/a:ibm:db2:11.1::~~advanced_workgroup~~~
cpe:/a:ibm:db2:11.1::~~enterprise~~~
cpe:/a:ibm:db2:11.1::~~express~~~
cpe:/a:ibm:db2:11.1::~~workgroup~~~
cpe:/a:ibm:db2_connect:9.7::~~application_server~~~
cpe:/a:ibm:db2_connect:9.7::~~enterprise~~~
cpe:/a:ibm:db2_connect:9.7::~~unlimited~~~
cpe:/a:ibm:db2_connect:10.1::~~application_server~~~
cpe:/a:ibm:db2_connect:10.1::~~enterprise~~~
cpe:/a:ibm:db2_connect:10.1::~~unlimited~~~
cpe:/a:ibm:db2_connect:10.5::~~application_server~~~
cpe:/a:ibm:db2_connect:10.5::~~enterprise~~~
cpe:/a:ibm:db2_connect:10.5::~~unlimited~~~
cpe:/a:ibm:db2_connect:11.1.0.0::~~application_server~~~
cpe:/a:ibm:db2_connect:11.1.0.0::~~enterprise~~~
cpe:/a:ibm:db2_connect:11.1.0.0::~~unlimited~~~

Date published: 2017-06-27T12:29:00.417-04:00

Date last modified: 2017-08-11T21:29:03.877-04:00

CVSS Score: 4.4

Principal attack vector: LOCAL

Complexity:  MEDIUM

Reference URL: http://www.ibm.com/support/docview.wss?uid=swg22004878

Summary: IBM DB2 for Linux, UNIX and Windows 9.2, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) is vulnerable to a stack-based buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code. IBM X-Force ID: 125159.

CategoriesUncategorised

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.