PT-2017-12916 · Ibm · Ibm Informix Dynamic Server

Published 2017-06-29 · Updated 2017-07-07 · CVE-2017-1310

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions IBM Informix Dynamic Server version 12.1

Description The issue allows an authenticated user to cause a buffer overflow, resulting in large assertion fail files being written to the server. Repeated exploitation could consume large parts of the file system and potentially cause the server to crash.

Recommendations For IBM Informix Dynamic Server version 12.1, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2017-1310

Affected Products

Ibm Informix Dynamic Server

References · 6

• http://ibm.com/support/docview.wss?uid=swg22004930 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-1310 · Security Note
• https://osv.dev/vulnerability/CVE-2017-1310 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/125569 · Vendor Advisory
• http://securityfocus.com/bid/99309 · Note
• http://securitytracker.com/id/1038803 · Note