← Back

CVE-2019-4057

nvd nist
Published: Jul 1, 2019Modified: Nov 21, 2024

JSON object

Loading...
6.7
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Exploitability: 0.8 / Impact: 5.9
Source: NVD

Description

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow malicious user with access to the DB2 instance account to leverage a fenced execution process to execute arbitrary code as root. IBM X-Force ID: 156567.

Affected (35)

Products: Ibm: Db2
Ibm
1 product
Db2
Configuration A
35 vulnerable · 2 platform
Vulnerable SoftwareAffected Versions
Ibm
Db2
Version 10.1.0.0
Db2
Version 10.1.0.1
Db2
Version 10.1.0.2
Db2
Version 10.1.0.3
Db2
Version 10.1.0.4
Db2
Version 10.1.0.5
Db2
Version 10.1.0.6
Db2
Version 10.5.0.0
Db2
Version 10.5.0.10
Db2
Version 10.5.0.1
Db2
Version 10.5.0.2
Db2
Version 10.5.0.3
Db2
Version 10.5.0.4
Db2
Version 10.5.0.5
Db2
Version 10.5.0.6
Db2
Version 10.5.0.7
Db2
Version 10.5.0.8
Db2
Version 10.5.0.9
Db2
Version 11.1.0.0
Db2
Version 11.1.1.1
Db2
Version 11.1.2.2
Db2
Version 11.1.3.3
Db2
Version 11.1.4.4
Db2
Version 9.7.0.0
Db2
Version 9.7.0.10
Db2
Version 9.7.0.11
Db2
Version 9.7.0.1
Db2
Version 9.7.0.2
Db2
Version 9.7.0.3
Db2
Version 9.7.0.4
Db2
Version 9.7.0.5
Db2
Version 9.7.0.6
Db2
Version 9.7.0.7
Db2
Version 9.7.0.8
Db2
Version 9.7.0.9
Running on/withPlatform Versions
Linux
Linux Kernel
All versions
Microsoft
Windows
All versions

References (4)

Source: psirt@us.ibm.com
VDB EntryVendor Advisory
Source: psirt@us.ibm.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
VDB EntryVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.