IBM DB2 CVE-2019-4154 Local Buffer Overflow Vulnerability

Bugtraq ID:	109024
Class:	Boundary Condition Error
CVE:	CVE-2019-4154
Remote:	No
Local:	Yes
Published:	Jun 27 2019 12:00AM
Updated:	Jun 27 2019 12:00AM
Credit:	Rich Mirch
Vulnerable:	IBM DB2 9.7 Fix Pack 6 0 IBM DB2 10.1 .4 IBM DB2 9.7.0.9 IBM DB2 9.7.0.8 IBM DB2 9.7.0.7 IBM DB2 9.7.0.6 IBM DB2 9.7.0.5 IBM DB2 9.7.0.4 IBM DB2 9.7.0.3 IBM DB2 9.7.0.2 IBM DB2 9.7.0.1 IBM DB2 9.7 Fp5 IBM DB2 9.7 Fp3a IBM DB2 9.7 Fp2 IBM DB2 9.7 FP11 IBM DB2 9.7 Fixpack 4 IBM DB2 9.7 fixpack 3 IBM DB2 9.7 fixpack 2 IBM DB2 9.7 Fix Pack 7 IBM DB2 9.7 IBM DB2 11.1.4.4 iFix001 IBM DB2 11.1 IBM DB2 10.5.0.7 IBM DB2 10.5.0.4 IBM DB2 10.5.0.3 IBM DB2 10.5.0.2 IBM DB2 10.5.0.1 IBM DB2 10.5 FP9 IBM DB2 10.5 FP8 IBM DB2 10.5 FP10 IBM DB2 10.5 IBM DB2 10.1.0.3 IBM DB2 10.1.0.2 IBM DB2 10.1.0.1 IBM DB2 10.1 FP6 IBM DB2 10.1 Fix Pack 1 IBM DB2 10.1
Not Vulnerable:

IBM DB2 CVE-2019-4154 Local Buffer Overflow Vulnerability

IBM DB2 is prone to a local buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data.

Attackers can exploit this issue to execute arbitrary code with root privileges.

IBM Db2 versions 9.7, 10.1, 10.5, and 11.1 are vulnerable.