Vulnerabilities > CVE-2017-1451 - Unspecified vulnerability in IBM DB2 and DB2 Connect

CVSS 7.8 - HIGH

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

local

low complexity

ibm

NVD

Published: 2017-09-12

Updated: 2024-11-21

Summary

IBM DB2 for Linux, UNIX and Windows 9.7, 10,1, 10.5, and 11.1 (includes DB2 Connect Server) could allow a local user with DB2 instance owner privileges to obtain root access. IBM X-Force ID: 128178.

Vulnerable Configurations

Part	Description	Count
Application	Ibm IBM DB2 9.7 IBM DB2 9.7.0.1 IBM DB2 9.7.0.2 IBM DB2 9.7.0.3 IBM DB2 9.7.0.4 IBM DB2 9.7.0.5 IBM DB2 9.7.0.6 IBM DB2 9.7.0.7 IBM DB2 9.7.0.8 IBM DB2 9.7.0.9 IBM DB2 9.7.0.10 IBM DB2 9.7.0.11 IBM DB2 10.1 IBM DB2 10.1.0.1 IBM DB2 10.1.0.2 IBM DB2 10.1.0.3 IBM DB2 10.1.0.4 IBM DB2 10.1.0.5 IBM DB2 10.5 IBM DB2 10.5.0.1 IBM DB2 10.5.0.2 IBM DB2 10.5.0.3 IBM DB2 10.5.0.4 IBM DB2 10.5.0.5 IBM DB2 10.5.0.6 IBM DB2 10.5.0.7 IBM DB2 11.1.0.0 IBM DB2 Connect 9.7 IBM DB2 Connect 9.7.0.1 IBM DB2 Connect 9.7.0.2 IBM DB2 Connect 9.7.0.3 IBM DB2 Connect 9.7.0.4 IBM DB2 Connect 9.7.0.5 IBM DB2 Connect 9.7.0.6 IBM DB2 Connect 9.7.0.7 IBM DB2 Connect 9.7.0.8 IBM DB2 Connect 9.7.0.9 IBM DB2 Connect 9.7.0.10 IBM DB2 Connect 9.7.0.11 IBM DB2 Connect 10.1 IBM DB2 Connect 10.1.0.1 IBM DB2 Connect 10.1.0.2 IBM DB2 Connect 10.1.0.3 IBM DB2 Connect 10.1.0.4 IBM DB2 Connect 10.1.0.5 IBM DB2 Connect 10.5 IBM DB2 Connect 10.5.0.1 IBM DB2 Connect 10.5.0.2 IBM DB2 Connect 10.5.0.3 IBM DB2 Connect 10.5.0.4 IBM DB2 Connect 10.5.0.5 IBM DB2 Connect 10.5.0.6 IBM DB2 Connect 10.5.0.7 IBM DB2 Connect 11.1.0.0	56
OS	Linux Linux Linux Kernel -	1
OS	Microsoft Microsoft Windows -	1

Summary

Vulnerable Configurations

References