Buffer overflow in Ibm Db2
CVE-2013-3475
Stack-based buffer overflow in db2aud in the Audit Facility in IBM DB2 and DB2 Connect 9.1, 9.5, 9.7, 9.8, and 10.1, as used in Smart Analytics System 7600 and other products, allows local users to gain privileges via unspecified vectors.
Vulnerability class: Buffer Overflow
EPSS: 0.001 (20.7th percentile) — read the EPSS interpretation.
Affected products
- Ibm Db2 — versions 9.1, 9.5, 9.7
- Ibm Db2_connect — versions 9.1, 9.5, 9.7
- Ibm Smart_analytics_system_7600
- N/a — versions n/a
Weakness classification (CWE)
References
- IC92495 (vendor-advisory, x_refsource_AIXAPAR)
- IC92496 (vendor-advisory, x_refsource_AIXAPAR)
- IC92463 (vendor-advisory, x_refsource_AIXAPAR)
- ibm-db2-cve20133475-bo(84358) (vdb-entry, x_refsource_XF)
- 53704 (x_refsource_SECUNIA, third-party-advisory, Vendor Advisory)
- 60255 (vdb-entry, x_refsource_BID)
- IC92498 (vendor-advisory, x_refsource_AIXAPAR)
- PSIRT-CNA@flexerasoftware.com (x_refsource_CONFIRM, Vendor Advisory)
- 52663 (x_refsource_SECUNIA, third-party-advisory, Vendor Advisory)
- PSIRT-CNA@flexerasoftware.com (x_refsource_CONFIRM, Vendor Advisory)