CVE-2018-1635

CVSS 8.2 HIGHEPSS 0.4%

Vexday Risk Score

21Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 8.2EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

20 Aug 2019Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

Stack-based buffer overflow in oninit in IBM Informix Dynamic Server Enterprise Edition 12.1 allows an authenticated user to execute predefined code with root privileges, such as escalating to a root shell. IBM X-Force ID: 144439.

CVSS:3.0/C:H/PR:H/I:H/UI:N/S:C/AC:L/A:H/AV:L/RL:O/RC:C/E:U

Affected products

IBM · Informix Dynamic Server Enterprise Edition

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/144439 https://security.netapp.com/advisory/ntap-20190903-0002/http://www.ibm.com/support/docview.wss?uid=ibm10964987