CVE-2019-4057
EUVD-2019-1366401.07.2019, 15:15
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow malicious user with access to the DB2 instance account to leverage a fenced execution process to execute arbitrary code as root. IBM X-Force ID: 156567.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| ibm | db2 | 9.7.0.0 |
| ibm | db2 | 9.7.0.1 |
| ibm | db2 | 9.7.0.2 |
| ibm | db2 | 9.7.0.3 |
| ibm | db2 | 9.7.0.4 |
| ibm | db2 | 9.7.0.5 |
| ibm | db2 | 9.7.0.6 |
| ibm | db2 | 9.7.0.7 |
| ibm | db2 | 9.7.0.8 |
| ibm | db2 | 9.7.0.9 |
| ibm | db2 | 9.7.0.10 |
| ibm | db2 | 9.7.0.11 |
| ibm | db2 | 10.1.0.0 |
| ibm | db2 | 10.1.0.1 |
| ibm | db2 | 10.1.0.2 |
| ibm | db2 | 10.1.0.3 |
| ibm | db2 | 10.1.0.4 |
| ibm | db2 | 10.1.0.5 |
| ibm | db2 | 10.1.0.6 |
| ibm | db2 | 10.5.0.0 |
| ibm | db2 | 10.5.0.1 |
| ibm | db2 | 10.5.0.2 |
| ibm | db2 | 10.5.0.3 |
| ibm | db2 | 10.5.0.4 |
| ibm | db2 | 10.5.0.5 |
| ibm | db2 | 10.5.0.6 |
| ibm | db2 | 10.5.0.7 |
| ibm | db2 | 10.5.0.8 |
| ibm | db2 | 10.5.0.9 |
| ibm | db2 | 10.5.0.10 |
| ibm | db2 | 11.1.0.0 |
| ibm | db2 | 11.1.1.1 |
| ibm | db2 | 11.1.2.2 |
| ibm | db2 | 11.1.3.3 |
| ibm | db2 | 11.1.4.4 |
𝑥
= Vulnerable software versions