CVE-2018-1977

IBM DB2 for Linux, UNIX and Windows 11.1 (includes DB2 Connect Server) contains a denial of service vulnerability. A remote, authenticated DB2 user could exploit this vulnerability by issuing a specially-crafted SELECT statement with TRUNCATE function. IBM X-Force ID: 154032.

Published : 2018-12-14 16:29 Updated : 2019-10-09 23:39

4.0
CVSS Score More info
Score 4.0 / 10
4.0
Vendor Product Version URI
Ibm Db2 11.1 cpe:/a:ibm:db2:11.1
  1. Ibm (1) Search CVE
    1. Db2 (1) Search CVE
      1. 11.1

CWE

ID Name Description Links
CWE-20 Improper Input Validation The product does not validate or incorrectly validates input that can affect the control flow or data flow of a program. CVE

History of changes

Date Event
2019-01-07 14:12
2018-12-18 11:29
2018-12-14 17:29
2018-12-14 16:29

New CVE