Vulnerabilities > IBM > DB2 > Critical

DATE CVE VULNERABILITY TITLE RISK
2018-03-22 CVE-2018-1426 Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG) vulnerability in IBM DB2
IBM GSKit (IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1) duplicates the PRNG state across fork() system calls when multiple ICC instances are loaded which could result in duplicate Session IDs and a risk of duplicate key material.
network
low complexity
ibm CWE-335
critical
9.1