{"api_version":"1","generated_at":"2026-07-23T14:18:49+00:00","cve":"CVE-2017-1310","urls":{"html":"https://cve.report/CVE-2017-1310","api":"https://cve.report/api/cve/CVE-2017-1310.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2017-1310","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2017-1310"},"summary":{"title":"CVE-2017-1310","description":"IBM Informix Dynamic Server 12.1 could allow an authenticated user to cause a buffer overflow that would write large assertion fail files to the server. Done enough times, this could use large parts of the file system and cause the server to crash. IBM X-Force ID: 125569.","state":"PUBLISHED","assigner":"ibm","published_at":"2017-06-29 13:29:00","updated_at":"2025-04-20 01:37:25"},"problem_types":["CWE-119","Denial of Service"],"metrics":[{"version":"3.0","source":"nvd@nist.gov","type":"Primary","score":"6.5","severity":"MEDIUM","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","data":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"}},{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4","severity":"","vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","baseScore":4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.securitytracker.com/id/1038803","name":"http://www.securitytracker.com/id/1038803","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Informix Dynamic Server Buffer Overflow Disk Space Consumption Bug Lets Remote Authenticated Users Cause the Target Server to Crash - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.ibm.com/support/docview.wss?uid=swg22004930","name":"http://www.ibm.com/support/docview.wss?uid=swg22004930","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"Security Bulletin: IBM Informix Dynamic Server is affected by a buffer overflow in Informix function FORMAT_UNITS","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/99309","name":"http://www.securityfocus.com/bid/99309","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"title":"IBM Informix Dynamic Server CVE-2017-1310 Buffer Overflow Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/125569","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/125569","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry","Vendor Advisory"],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-1310","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-1310","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"IBM","product":"Informix Servers","version":"affected 12.1","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2017","cve_id":"1310","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"informix_dynamic_server","cpe6":"12.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-05T13:32:29.417Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"1038803","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id/1038803"},{"tags":["x_refsource_MISC","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/125569"},{"name":"99309","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/99309"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.ibm.com/support/docview.wss?uid=swg22004930"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"Informix Servers","vendor":"IBM","versions":[{"status":"affected","version":"12.1"}]}],"datePublic":"2017-06-27T00:00:00.000Z","descriptions":[{"lang":"en","value":"IBM Informix Dynamic Server 12.1 could allow an authenticated user to cause a buffer overflow that would write large assertion fail files to the server. Done enough times, this could use large parts of the file system and cause the server to crash. IBM X-Force ID: 125569."}],"problemTypes":[{"descriptions":[{"description":"Denial of Service","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-07-06T09:57:01.000Z","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","shortName":"ibm"},"references":[{"name":"1038803","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id/1038803"},{"tags":["x_refsource_MISC"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/125569"},{"name":"99309","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/99309"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.ibm.com/support/docview.wss?uid=swg22004930"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@us.ibm.com","DATE_PUBLIC":"2017-06-27T00:00:00","ID":"CVE-2017-1310","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Informix Servers","version":{"version_data":[{"version_value":"12.1"}]}}]},"vendor_name":"IBM"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"IBM Informix Dynamic Server 12.1 could allow an authenticated user to cause a buffer overflow that would write large assertion fail files to the server. Done enough times, this could use large parts of the file system and cause the server to crash. IBM X-Force ID: 125569."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Denial of Service"}]}]},"references":{"reference_data":[{"name":"1038803","refsource":"SECTRACK","url":"http://www.securitytracker.com/id/1038803"},{"name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/125569","refsource":"MISC","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/125569"},{"name":"99309","refsource":"BID","url":"http://www.securityfocus.com/bid/99309"},{"name":"http://www.ibm.com/support/docview.wss?uid=swg22004930","refsource":"CONFIRM","url":"http://www.ibm.com/support/docview.wss?uid=swg22004930"}]}}}},"cveMetadata":{"assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","assignerShortName":"ibm","cveId":"CVE-2017-1310","datePublished":"2017-06-29T13:00:00.000Z","dateReserved":"2016-11-30T00:00:00.000Z","dateUpdated":"2024-09-16T17:18:23.512Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2017-06-29 13:29:00","lastModifiedDate":"2025-04-20 01:37:25","problem_types":["CWE-119","Denial of Service"],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","baseScore":4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:12.10:*:*:*:*:*:*:*","matchCriteriaId":"08A95A4E-A509-4FDB-BF4E-88B000C93DAC"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2017","CveId":"1310","Ordinal":"1","Title":"CVE-2017-1310","CVE":"CVE-2017-1310","Year":"2017"},"notes":[{"CveYear":"2017","CveId":"1310","Ordinal":"1","NoteData":"IBM Informix Dynamic Server 12.1 could allow an authenticated user to cause a buffer overflow that would write large assertion fail files to the server. Done enough times, this could use large parts of the file system and cause the server to crash. IBM X-Force ID: 125569.","Type":"Description","Title":"CVE-2017-1310"},{"CveYear":"2017","CveId":"1310","Ordinal":"2","NoteData":"2017-06-29","Type":"Other","Title":"Published"},{"CveYear":"2017","CveId":"1310","Ordinal":"3","NoteData":"2017-07-06","Type":"Other","Title":"Modified"}]}}}