CVE-2019-4014
En bref Sévérité HIGH 8.4 EPSS EPSS 0.51 % · centile 43 (2026-10-27) État PUBLISHED Publiée 2019-04-03 Mise à jour 2024-09-16 Attribuée par ibm Statut NVD Modified Description IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker to execute arbitrary code on the system as root. IBM X-Force ID: 155892.
Scores Version Score Vecteur Évalué par CVSS 3.0 HIGH 8.4 CVSS:3.0/UI:N/S:U/PR:N/A:H/AC:L/C:H/AV:L/I:H/RL:O/RC:C/E:U ibm CVSS 3.1 HIGH 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H NVD · nvd@nist.gov (Primary) CVSS 3.0 HIGH 8.4 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H NVD · psirt@us.ibm.com (Secondary) CVSS 2.0 HIGH 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C NVD · nvd@nist.gov (Primary)
Faiblesses (CWE)
Références européennes
Configurations affectées (CPE NVD) cpe:2.3:a:ibm:db2:9.7.0.0:*:*:*:*:*:*:*cpe:2.3:a:ibm:db2:9.7.0.1:*:*:*:*:*:*:*cpe:2.3:a:ibm:db2:9.7.0.2:*:*:*:*:*:*:*cpe:2.3:a:ibm:db2:9.7.0.3:*:*:*:*:*:*:*cpe:2.3:a:ibm:db2:9.7.0.4:*:*:*:*:*:*:*cpe:2.3:a:ibm:db2:9.7.0.5:*:*:*:*:*:*:*cpe:2.3:a:ibm:db2:9.7.0.6:*:*:*:*:*:*:*cpe:2.3:a:ibm:db2:9.7.0.7:*:*:*:*:*:*:*cpe:2.3:a:ibm:db2:9.7.0.8:*:*:*:*:*:*:*cpe:2.3:a:ibm:db2:9.7.0.9:*:*:*:*:*:*:*cpe:2.3:a:ibm:db2:9.7.0.10:*:*:*:*:*:*:*cpe:2.3:a:ibm:db2:9.7.0.11:*:*:*:*:*:*:*cpe:2.3:a:ibm:db2:10.1.0.0:*:*:*:*:*:*:*cpe:2.3:a:ibm:db2:10.1.0.1:*:*:*:*:*:*:*cpe:2.3:a:ibm:db2:10.1.0.2:*:*:*:*:*:*:*cpe:2.3:a:ibm:db2:10.1.0.3:*:*:*:*:*:*:*cpe:2.3:a:ibm:db2:10.1.0.4:*:*:*:*:*:*:*cpe:2.3:a:ibm:db2:10.1.0.5:*:*:*:*:*:*:*cpe:2.3:a:ibm:db2:10.1.0.6:*:*:*:*:*:*:*cpe:2.3:a:ibm:db2:10.5.0.0:*:*:*:*:*:*:*cpe:2.3:a:ibm:db2:10.5.0.1:*:*:*:*:*:*:*cpe:2.3:a:ibm:db2:10.5.0.2:*:*:*:*:*:*:*cpe:2.3:a:ibm:db2:10.5.0.3:*:*:*:*:*:*:*cpe:2.3:a:ibm:db2:10.5.0.4:*:*:*:*:*:*:*cpe:2.3:a:ibm:db2:10.5.0.5:*:*:*:*:*:*:*cpe:2.3:a:ibm:db2:10.5.0.6:*:*:*:*:*:*:*cpe:2.3:a:ibm:db2:10.5.0.7:*:*:*:*:*:*:*cpe:2.3:a:ibm:db2:10.5.0.8:*:*:*:*:*:*:*cpe:2.3:a:ibm:db2:10.5.0.9:*:*:*:*:*:*:*cpe:2.3:a:ibm:db2:10.5.0.10:*:*:*:*:*:*:*cpe:2.3:a:ibm:db2:11.1.0.0:*:*:*:*:*:*:*cpe:2.3:a:ibm:db2:11.1.1.1:*:*:*:*:*:*:*cpe:2.3:a:ibm:db2:11.1.2.2:*:*:*:*:*:*:*cpe:2.3:a:ibm:db2:11.1.3.3:*:*:*:*:*:*:*cpe:2.3:a:ibm:db2:11.1.4.4:*:*:*:*:*:*:*Produits affectés Produit Versions IBM · DB2 affected 9.7 ; affected 10.1 ; affected 10.5 IBM · Db2 affected 11.1
Références
Sources
