CVE-2018-1459

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to stack based buffer overflow, caused by improper bounds checking which could lead an attacker to execute arbitrary code. IBM X-Force ID: 140210.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

Vendor	Product	Versions
IBM	DB2 for Linux, UNIX and Windows	10.5; 10.1; 9.7; 11.1

References

http://www.ibm.com/support/docview.wss?uid=swg22016142Vendor Advisory
http://www.securitytracker.com/id/1041005Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/140210VDB Entry, Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg22016142Vendor Advisory
http://www.securitytracker.com/id/1041005Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/140210VDB Entry, Vendor Advisory

Timeline

Published: May 25, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-145907.5An issue has been discovered in Bento4 1.5.1-624. A SEGV can occur in AP4_Processor::ProcessFragments in Core/Ap4Processor.cpp.CVE-2018-145929.8The CWJoomla CW Article Attachments PRO extension before 2.0.7 and CW Article Attachments FREE extension before 1.0.6 for Joomla! allow SQL CVE-2018-145938.8An issue was discovered in Open Ticket Request System (OTRS) 6.0.x through 6.0.9, 5.0.x through 5.0.28, and 4.0.x through 4.0.30. An attacke CVE-2018-145967.5wancms 1.0 through 5.0 allows remote attackers to cause a denial of service (resource consumption) via a checkcode (aka verification code) U CVE-2018-145975.3CA Technologies Identity Governance 12.6, 14.0, 14.1, and 14.2 and CA Identity Suite Virtual Appliance 14.0, 14.1, and 14.2 provide telling CVE-2018-145987.5An issue was discovered in XListExtensions in ListExt.c in libX11 through 1.6.5. A malicious server can send a reply in which the first stri CVE-2018-145999.8An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c is vulnerable to an off-by-one error caused by ma CVE-2018-14607.8IBM Netezza Platform Software (IBM PureData System for Analytics 1.0.0) could allow a local user to modify a world writable file, which coul CVE-2018-146009.8An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c interprets a variable as signed instead of unsign CVE-2018-146017.5An issue was discovered in GitLab Community and Enterprise Edition 11.1.x before 11.1.2. A Denial of Service can occur because Markdown rend CVE-2018-146027.5An issue was discovered in GitLab Community and Enterprise Edition before 10.8.7, 11.0.x before 11.0.5, and 11.1.x before 11.1.2. Informatio CVE-2018-146038.8An issue was discovered in GitLab Community and Enterprise Edition before 10.8.7, 11.0.x before 11.0.5, and 11.1.x before 11.1.2. CSRF can o