CVE-2018-1710

CVSS 8.4 HIGHEPSS 0.5%

Vexday Risk Score

21Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 8.4EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado

Ciclo de vida

21 set 2018Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.1, 10.5, and 11.1 tool db2licm is affected by buffer overflow vulnerability that can potentially result in arbitrary code execution. IBM X-Force ID: 146364.

CVSS:3.0/A:H/AC:L/AV:L/C:H/I:H/PR:N/S:U/UI:N/E:U/RC:C/RL:O

Produtos afetados

IBM · DB2 for Linux, UNIX and Windows

Referências

https://exchange.xforce.ibmcloud.com/vulnerabilities/146364 https://usn.ubuntu.com/3906-2/https://www.ibm.com/support/docview.wss?uid=ibm10729981 http://www.securityfocus.com/bid/105391