IBM DB2 9.7.0.5 (Fix Pack 5)

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:db2:9.7.0.5:*:*:*:*:*:*:*

part: a version: 9.7.0.5 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductDb2 (5963772f-bccc-50e2-883c-858291bf5bb7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-4154 vulnerable 2026-06-08 05:13:56.889301 Details available
HIGH (8.4)
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker to execute arbitrary code on the system as root. IBM X-Force ID: 158519.
Published: 2019-07-01T15:05:37.747Z
Updated: 2024-09-17T02:42:10.865Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4102 vulnerable 2026-06-08 05:13:56.824703 Details available
MEDIUM (5.9)
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 158092.
Published: 2019-07-01T15:05:37.682Z
Updated: 2024-09-17T04:05:02.616Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4101 vulnerable 2026-06-08 05:13:56.822774 Details available
MEDIUM (6.2)
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.1, 10.5, and 11.1 is vulnerable to a denial of service. Users that have both EXECUTE on PD_GET_DIAG_HIST and access to the diagnostic directory on the DB2 server can cause the instance to crash. IBM X-Force ID: 158091.
Published: 2019-07-01T15:05:37.630Z
Updated: 2024-09-16T18:13:44.028Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4057 vulnerable 2026-06-08 05:13:56.756560 Details available
MEDIUM (6.7)
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow malicious user with access to the DB2 instance account to leverage a fenced execution process to execute arbitrary code as root. IBM X-Force ID: 156567.
Published: 2019-07-01T15:05:37.482Z
Updated: 2024-09-16T18:09:24.227Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4014 vulnerable 2026-06-08 05:13:56.638028 Details available
HIGH (8.4)
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker to execute arbitrary code on the system as root. IBM X-Force ID: 155892.
Published: 2019-04-03T13:50:29.652Z
Updated: 2024-09-16T17:54:01.151Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1936 vulnerable 2026-06-08 05:11:26.410903 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1520 vulnerable 2026-06-08 05:09:22.510987 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1452 vulnerable 2026-06-08 05:09:22.197398 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1451 vulnerable 2026-06-08 05:09:22.195735 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1439 vulnerable 2026-06-08 05:09:22.135195 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1438 vulnerable 2026-06-08 05:09:22.092417 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5995 vulnerable 2026-06-08 05:07:58.370317 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0211 vulnerable 2026-06-08 05:07:14.334020 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3095 vulnerable 2026-06-08 05:05:31.160565 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3094 vulnerable 2026-06-08 05:05:31.141450 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0907 vulnerable 2026-06-08 05:05:14.998867 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6744 vulnerable 2026-06-08 05:05:06.848042 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6717 vulnerable 2026-06-08 05:05:06.683482 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4826 vulnerable 2026-06-08 05:02:52.823976 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2197 vulnerable 2026-06-08 05:00:53.296189 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2196 vulnerable 2026-06-08 05:00:53.294833 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2194 vulnerable 2026-06-08 05:00:53.290720 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2180 vulnerable 2026-06-08 05:00:53.192846 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0713 vulnerable 2026-06-08 05:00:44.594301 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.