CVE-2010-4069 — Improper Restriction of Operations within the Bounds of a Memory Buffer in IBM Informix Dynamic Server

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer3 documents3 sources

Severity

8.5HIGHNVD

EPSS

8.7%

top 7.51%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

IBM Informix Dynamic Server

Timeline

PublishedOct 25

Latest updateMay 17

Description

Stack-based buffer overflow in IBM Informix Dynamic Server (IDS) 7.x through 7.31, 9.x through 9.40, 10.00 before 10.00.xC10, 11.10 before 11.10.xC3, and 11.50 before 11.50.xC3 allows remote authenticated users to execute arbitrary code via long DBINFO keyword arguments in a SQL statement, aka idsdb00165017, idsdb00165019, idsdb00165021, idsdb00165022, and idsdb00165023.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 6.8 | Impact: 10.0

Affected Packages1 packages

▶NVDibm/informix_dynamic_server29 versions+28

🔴Vulnerability Details

GHSA

GHSA-wfwm-wprr-j47w: Stack-based buffer overflow in IBM Informix Dynamic Server (IDS) 7↗2022-05-17

▶

CVEList

CVE-2010-4069: Stack-based buffer overflow in IBM Informix Dynamic Server (IDS) 7↗2010-10-25

▶