IBM Security Bulletin: Privilege escalation vulnerabilities affect IBM® Db2® (CVE-2017-1439, CVE-2017-1451)

Vulnerabilities in IBM Db2 could allow a local user to gain elevated privilege.

CVE(s): CVE-2017-1439, CVE-2017-1451

Affected product(s) and affected version(s):

All fix pack levels of IBM Db2 V9.7, V10.1, V10.5, and V11.1 server editions running on AIX, Linux, HP, Solaris are affected. Db2 running on Windows is not vulnerable.

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2iX1UV5
X-Force Database: http://ift.tt/2wPZaxu
X-Force Database: http://ift.tt/2wgsz0h

The post IBM Security Bulletin: Privilege escalation vulnerabilities affect IBM® Db2® (CVE-2017-1439, CVE-2017-1451) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2wQKRZI