VULNERABILITY INTELLIGENCE
CVE-2018-1710
CVSS score8.4 HIGH
EPSS probability0.53%
CISA KEVNot currently listed
Published2018-09-21
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.1, 10.5, and 11.1 tool db2licm is affected by buffer overflow vulnerability that can potentially result in arbitrary code execution. IBM X-Force ID: 146364.
Weakness classification
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
Primary references
- psirt@us.ibm.com — Third Party Advisory, VDB Entry
- psirt@us.ibm.com — VDB Entry, Vendor Advisory
- psirt@us.ibm.com
- psirt@us.ibm.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — VDB Entry, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory