PT-2019-17118 · Ibm · Ibm Db2 High Performance Unload

Rich Mirch · Published 2019-10-22 · Updated 2019-10-24 · CVE-2019-4523

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM DB2 High Performance Unload load for LUW versions 6.1 through 6.5

Description The issue is caused by improper bounds checking, leading to a buffer overflow. This could allow a local attacker to execute arbitrary code on the system with root privileges.

Recommendations For versions 6.1 through 6.5, update to a version that includes the fix for this issue to prevent exploitation.

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2019-4523

Affected Products

Ibm Db2 High Performance Unload

References · 4

• https://exchange.xforce.ibmcloud.com/vulnerabilities/165481 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-4523 · Security Note
• https://osv.dev/vulnerability/CVE-2019-4523 · Vendor Advisory
• https://supportcontent.ibm.com/support/pages/node/1073236 · Note