CVE-2019-4094

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 binaries load shared libraries from an untrusted path potentially…

High · published March 19, 2019

CVSS v3.0
8.4
EPSS
0%
Percentile
33.7
In the wild
Unconfirmed
What it is

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 binaries load shared libraries from an untrusted path potentially giving low privilege user full access to root by loading a malicious shared library. IBM X-Force ID: 158014.

The record
Technical detail
CVSS v3.0
8.4 · HIGH
Vector
CVSS:3.0/PR:N/A:H/S:U/I:H/AC:L/C:H/AV:L/UI:N/E:U/RC:C/RL:O
CVSS v4.0
Not supplied
EPSS
0.00406 · 33.7th percentile
Published
2019-03-19T13:50Z
EPSS history
Timeline
  • 19 MAR 13:50Z
    IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 binaries load shared libraries from an untrusted path potentially…
    cvelistv5