Skip to content

Known vulnerabilities in IBM DB2 for Linux, UNIX and Windows

Is your version affected?

CVE Summary Score Published
CVE-2018-1459 IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to stack based… Not rated May 25, 2018
CVE-2018-1452 IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 contains a vulnerability… Not rated May 25, 2018
CVE-2018-1451 IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 contains a vulnerability… Not rated May 25, 2018
CVE-2018-1428 IBM GSKit (IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1) uses weaker than expected cryptographic… 6.2 Medium Mar 22, 2018
CVE-2018-1427 IBM GSKit (IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1) contains several environment variables that… 6.2 Medium Mar 22, 2018
CVE-2018-1426 IBM GSKit (IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1) duplicates the PRNG state across fork() system… 7.4 High Mar 22, 2018
CVE-2018-1448 IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) contains a vulnerability… 7.7 High Mar 22, 2018
CVE-2017-1677 IBM Data Server Driver for JDBC and SQLJ (IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1) deserializes… 7.4 High Mar 22, 2018
CVE-2017-1571 IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 uses weaker than expected… 5.1 Medium Mar 22, 2018
CVE-2017-1520 IBM DB2 9.7, 10,1, 10.5, and 11.1 is vulnerable to an unauthorized command that allows the database to be activated when… Not rated Sep 12, 2017
CVE-2017-1519 IBM DB2 10.5 and 11.1 contains a denial of service vulnerability Not rated Sep 12, 2017
CVE-2017-1439 IBM DB2 for Linux, UNIX and Windows 9.7, 10,1, 10.5, and 11.1 (includes DB2 Connect Server) could allow a local user… Not rated Sep 12, 2017
CVE-2017-1438 IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) could allow a local user… Not rated Sep 12, 2017
CVE-2017-1434 IBM DB2 for Linux, UNIX and Windows 11.1 (includes DB2 Connect Server) under unusual circumstances, could expose… Not rated Sep 12, 2017
CVE-2017-1452 IBM DB2 for Linux, UNIX and Windows 9.7, 10,1, 10.5, and 11.1 (includes DB2 Connect Server) could allow a local user… Not rated Sep 12, 2017
CVE-2017-1451 IBM DB2 for Linux, UNIX and Windows 9.7, 10,1, 10.5, and 11.1 (includes DB2 Connect Server) could allow a local user… Not rated Sep 12, 2017
CVE-2017-1297 IBM DB2 for Linux, UNIX and Windows 9.2, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) is vulnerable to a… Not rated Jun 27, 2017
CVE-2017-1105 IBM DB2 for Linux, UNIX and Windows 9.2, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) is vulnerable to a buffer… Not rated Jun 27, 2017

Other IBM products