VULNERABILITY INTELLIGENCE
CVE-2012-4826
CVSS score8.5 HIGH
EPSS probability4.91%
CISA KEVNot currently listed
Published2012-10-20
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:S/C:C/I:C/A:C
Description
Stack-based buffer overflow in the SQL/PSM (aka SQL Persistent Stored Module) Stored Procedure (SP) infrastructure in IBM DB2 9.1, 9.5, 9.7 before FP7, 9.8, and 10.1 might allow remote authenticated users to execute arbitrary code by debugging a stored procedure.
Weakness classification
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
Primary references
- psirt@us.ibm.com
- psirt@us.ibm.com
- psirt@us.ibm.com — Vendor Advisory
- psirt@us.ibm.com
- psirt@us.ibm.com
- psirt@us.ibm.com
- psirt@us.ibm.com — Vendor Advisory
- psirt@us.ibm.com — Vendor Advisory
- psirt@us.ibm.com
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory