VULNERABILITY INTELLIGENCE

CVE-2018-1459

CVSS score7.8 HIGH
EPSS probability0.50%
CISA KEVNot currently listed
Published2018-05-25
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to stack based buffer overflow, caused by improper bounds checking which could lead an attacker to execute arbitrary code. IBM X-Force ID: 140210.

Weakness classification

  • CWE-787: Out-of-bounds Write

Primary references