High severity7.4NVD Advisory· Published Mar 22, 2018· Updated Jun 17, 2026

CVE-2018-1426

Description

IBM GSKit (IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1) duplicates the PRNG state across fork() system calls when multiple ICC instances are loaded which could result in duplicate Session IDs and a risk of duplicate key material. IBM X-Force ID: 139071.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

IBM/Db2 for Linux, UNIX and Windowsllm-fuzzy
Range: <=11.1
IBM/GSKitllm-fuzzy
IBM/Db2 Recovery Expert for Linux, UNIX and Windowscpe-rescue
Range: 10.5

Patches

Vulnerability mechanics

References

www.ibm.com/support/docview.wssnvdVendor Advisory
www.securityfocus.com/bid/105580nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1041012nvdThird Party AdvisoryVDB Entry
exchange.xforce.ibmcloud.com/vulnerabilities/139071nvdVDB EntryVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.481
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000