CVE-2019-4523 — Classic Buffer Overflow in IBM DB2 High Performance Unload Load FOR LUW

CWE-120 — Classic Buffer Overflow3 documents3 sources
Severity
7.8HIGHNVD
EPSS
0.2%
top 56.22%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
IBM DB2 High Performance Unload Load FOR LUWIBM DB2 High Performance Unload Load
Timeline
PublishedOct 22
Latest updateMay 24

Description

IBM DB2 High Performance Unload load for LUW 6.1 and 6.5 is vulnerable to a buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code on the system with root privileges. IBM X-Force ID: 165481.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-8xjf-2mv7-wrhw: IBM DB2 High Performance Unload load for LUW 6↗2022-05-24
▶
CVEList
CVE-2019-4523: IBM DB2 High Performance Unload load for LUW 6↗2019-10-22
▶
CVE-2019-4523 — Classic Buffer Overflow in IBM | cvebase