VYPR
← All advisories
Medium severity6.7NVD Advisory· Published Jul 1, 2019· Updated Jun 17, 2026

CVE-2019-4057

CVE-2019-4057

Description

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow malicious user with access to the DB2 instance account to leverage a fenced execution process to execute arbitrary code as root. IBM X-Force ID: 156567.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

37
  • IBM/Db235 versions
    cpe:2.3:a:ibm:db2:9.7.0.0:*:*:*:*:*:*:*+ 34 more
    • cpe:2.3:a:ibm:db2:9.7.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:9.7.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:9.7.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:9.7.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:9.7.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:9.7.0.5:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:9.7.0.6:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:9.7.0.7:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:9.7.0.8:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:9.7.0.9:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:9.7.0.10:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:9.7.0.11:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:10.1.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:10.1.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:10.1.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:10.1.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:10.1.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:10.1.0.5:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:10.1.0.6:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:10.5.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:10.5.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:10.5.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:10.5.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:10.5.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:10.5.0.5:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:10.5.0.6:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:10.5.0.7:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:10.5.0.8:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:10.5.0.9:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:10.5.0.10:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:11.1.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:11.1.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:11.1.2.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:11.1.3.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:db2:11.1.4.4:*:*:*:*:*:*:*
  • IBM/Db2 for Linux, UNIX and Windowsllm-fuzzy
    Range: 9.7, 10.1, 10.5, and 11.1
  • IBM/Db2 Recovery Expert for Linux, UNIX and Windowscpe-rescue
    Range: 10.5

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.