CVSS 3.1
6.7 mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HCVE-2023-35012
Medium (6.7) in ibm db2. EPSS 0.2% chance of exploitation in the next 30 days.
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 with a Federated configuration is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local user with SYSADM privileges could overflow the buffer and execute arbitrary code on the system. IBM X-Force ID: 257763.
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 14% of CVEs (scores of 2026-11-01)
- CWEs
- CWE-121, CWE-787
- Published
- Modified
- Record from
- the NVD, synced
Affected
- ibm:db2