CVE-2019-4588 - IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local user to execute arbitrary code and conduct DLL hijacking attacks

Back Back to CVE browser

HIGH

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local user to execute arbitrary code and conduct DLL hijacking attacks

Published May 26, 2021

7.8

HIGH

CVSS 3.1

EPSS 0.29%

Description

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local user to execute arbitrary code and conduct DLL hijacking attacks.

Affected products

Vendor IBM Product DB2 for Linux, UNIX and Windows Default
n/a
- Version
  10.1
  Status
  affected
  Constraints
  -
- Version
  10.5
  Status
  affected
  Constraints
  -
- Version
  11.1
  Status
  affected
  Constraints
  -
- Version
  11.5
  Status
  affected
  Constraints
  -
- Version
  9.7
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

IBM

DB2 for Linux, UNIX and Windows

n/a

Version	Status	Constraints
10.1	affected	-
10.5	affected	-
11.1	affected	-
11.5	affected	-
9.7	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-427

References (3)

https://exchange.xforce.ibmcloud.com/vulnerabilities/167365
vdb-entryx_refsource_XFVDB EntryVendor Advisory
https://security.netapp.com/advisory/ntap-20210629-0004/
x_refsource_CONFIRMThird Party Advisory
https://www.ibm.com/support/pages/node/6456029
x_refsource_CONFIRMMitigationVendor Advisory

Link	Providers	Tags
https://exchange.xforce.ibmcloud.com/vulnerabilities/167365		vdb-entryx_refsource_XFVDB EntryVendor Advisory
https://security.netapp.com/advisory/ntap-20210629-0004/		x_refsource_CONFIRMThird Party Advisory
https://www.ibm.com/support/pages/node/6456029		x_refsource_CONFIRMMitigationVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner ibm

Published May 26, 2021

Updated Sep 16, 2024

Reserved Jan 3, 2019

Link CVE-2019-4588

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-4588

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-4588