IBM DB2 Multiple Vulnerabilities

Last Update Date: 24 May 2018 09:47 Release Date: 24 May 2018 3520 Views

RISK: Medium Risk

TYPE: Servers - Database Servers

Multiple vulnerabilities have been identified in IBM DB2, which could be exploited by remote attacker to cause denial of service condition, elevation of privilege, sensitive information disclosure on the target system.

Impact

Denial of Service
Elevation of Privilege
Information Disclosure

System / Technologies affected

Versions 9.7, 10.1, 10.5 and 11.1

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

The vendor has issued fixes: http://www-01.ibm.com/support/docview.wss?uid=swg22015656

Vulnerability Identifier

CVE-2018-1488
CVE-2018-1515
CVE-2018-1544
CVE-2018-1565
CVE-2018-2579
CVE-2018-2602
CVE-2018-2618
CVE-2018-2678

Source

AusCERT
IBM