CVSS: 7.8EPSS: 0%CPEs: 11EXPL: 0CVE-2019-4606
https://notcve.org/view.php?id=CVE-2019-4606
12 Dec 2019 — IBM DB2 High Performance Unload load for LUW 6.1 and 6.5 could allow a local attacker to execute arbitrary code on the system, caused by an untrusted search path vulnerability. By using a executable file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 168298. La carga de IBM DB2 High Performance Unload para LUW versiones 6.1 y 6.5, podría permitir a un atacante local ejecutar código arbitrario en el sistema, causado por una vulnerabilidad de ruta de bús... • https://exchange.xforce.ibmcloud.com/vulnerabilities/168298 • CWE-426: Untrusted Search Path •
CVSS: 8.4EPSS: 0%CPEs: 5EXPL: 0CVE-2019-4523
https://notcve.org/view.php?id=CVE-2019-4523
22 Oct 2019 — IBM DB2 High Performance Unload load for LUW 6.1 and 6.5 is vulnerable to a buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code on the system with root privileges. IBM X-Force ID: 165481. Una carga de IBM DB2 High Performance Unload para LUW versiones 6.1 y 6.5, es vulnerable a un desbordamiento del búfer, causado por una comprobación de límites inapropiada que podría permitir a un atacante local ejecutar código arbitrario en el sistema con privil... • https://exchange.xforce.ibmcloud.com/vulnerabilities/165481 • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •