VYPR
← All advisories
High severity7.7NVD Advisory· Published Mar 22, 2018· Updated Jun 17, 2026

CVE-2018-1448

CVE-2018-1448

Description

IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) contains a vulnerability that could allow a local user to overwrite arbitrary files owned by the DB2 instance owner. IBM X-Force ID: 140043.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • IBM/Db25 versions
    cpe:2.3:a:ibm:db2:10.1:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:ibm:db2:10.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:10.5:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:11.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:9.7:*:*:*:*:*:*:*
    • (no CPE)range: <=11.1
  • IBM/Db2 Recovery Expert for Linux, UNIX and Windowscpe-rescue
    Range: 10.5

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.