CVE-2018-1636

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2018-1636
Stack-based buffer overflow in oninit in IBM Informix Dynamic Server Enterprise Edition 12.1 allows an authenticated user to execute predefined code with root privileges, such as escalating to a root shell. IBM X-Force ID: 144441.

6.7 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 0.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

7.2 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 3.9 / Impact : 10.0

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References
Link Resource
http://www.ibm.com/support/docview.wss?uid=ibm10964987 Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/144441 VDB Entry Vendor Advisory
https://security.netapp.com/advisory/ntap-20190903-0002/ Third Party Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ibm:informix_dynamic_server:12.10:fc1:*:*:enterprise:*:*:*
cpe:2.3:a:ibm:informix_dynamic_server:12.10:fc10:*:*:enterprise:*:*:*
cpe:2.3:a:ibm:informix_dynamic_server:12.10:fc11:*:*:enterprise:*:*:*
cpe:2.3:a:ibm:informix_dynamic_server:12.10:fc12:*:*:enterprise:*:*:*
cpe:2.3:a:ibm:informix_dynamic_server:12.10:fc2:*:*:enterprise:*:*:*
cpe:2.3:a:ibm:informix_dynamic_server:12.10:fc3:*:*:enterprise:*:*:*
cpe:2.3:a:ibm:informix_dynamic_server:12.10:fc4:*:*:enterprise:*:*:*
cpe:2.3:a:ibm:informix_dynamic_server:12.10:fc5:*:*:enterprise:*:*:*
cpe:2.3:a:ibm:informix_dynamic_server:12.10:fc6:*:*:enterprise:*:*:*
cpe:2.3:a:ibm:informix_dynamic_server:12.10:fc7:*:*:enterprise:*:*:*
cpe:2.3:a:ibm:informix_dynamic_server:12.10:fc8:*:*:enterprise:*:*:*
cpe:2.3:a:ibm:informix_dynamic_server:12.10:fc9:*:*:enterprise:*:*:*
History

24 Feb 2023, 00:30

Type Values Removed Values Added
References (CONFIRM) https://security.netapp.com/advisory/ntap-20190903-0002/ - (CONFIRM) https://security.netapp.com/advisory/ntap-20190903-0002/ - Third Party Advisory
Information

Published : 2019-08-20 19:15

Updated : 2023-12-10 12:59

NVD link : CVE-2018-1636

Mitre link : CVE-2018-1636

CVE.ORG link : CVE-2018-1636

JSON object : View

Products Affected

ibm

  • informix_dynamic_server
CWE
CWE-787

Out-of-bounds Write