Buffer overflow vulnerability in IBM DB2 - CVE-2019-4154 (Linux)ID: oval:org.secpod.oval:def:59844 | Date: (C)2019-12-10 (M)2023-03-10 |
Class: VULNERABILITY | Family: unix |
The host is installed with IBM DB2 9.7 through FP11, 10.1 through FP6, 10.5 through FP10 or 11.1 before FP5 and is prone to a buffer overflow vulnerability. A flaw is present in the application, which fails to properly handle the boundary checks issue. Successful exploitation allows an authenticated local attacker to execute arbitrary code on the system as root.