IBM Security Bulletin: IBM® Db2® is vulnerable to buffer overflow (CVE-2018-1459).

Db2’s rah.exe is vulnerable to a stack-based buffer overflow, caused by improper bounds checking, which could lead an attacker to execute arbitrary code.

CVE(s): CVE-2018-1459

Affected product(s) and affected version(s):

All fix pack levels of IBM Db2 V9.7, V10.1, V10.5, and V11.1 editions on Windows platform are affected. Unix-type platforms are not affected.

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=swg22016142
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/140210

The post IBM Security Bulletin: IBM® Db2® is vulnerable to buffer overflow (CVE-2018-1459). appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ift.tt/2IHbuna