Untriaged
Permalink
CVE-2026-10535
8.4 HIGH
- CVSS version (CVSS): 3.1
- Attack Vector (AV): Local (L)
- Attack Complexity (AC): Low (L)
- Privileges Required (PR): None (N)
- User Interaction (UI): None (N)
- Scope (S): Unchanged (U)
- Confidentiality (C): High (H)
- Integrity (I): High (H)
- Availability (A): High (H)
- Modified Attack Vector (MAV): Local (L)
- Modified Attack Complexity (MAC): Low (L)
- Modified Privileges Required (MPR): None (N)
- Modified User Interaction (MUI): None (N)
- Modified Confidentiality (MC): High (H)
- Modified Scope (MS): Unchanged (U)
- Modified Integrity (MI): High (H)
- Modified Availability (MA): High (H)
Activity log
- Created suggestion
IBM® Db2® is vulnerable to buffer overflow in setgid helper db2flacc which can lead to privilege escalation and instance compromise from an unprivileged shell
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to buffer overflow in setgid helper db2flacc.
References
Affected products
Db2
- =<11.5.9
- =<12.1.4
Matching in nixpkgs
pkgs.pdb2pqr
Software for determining titration states, adding missing atoms, and assigning charges/radii to biomolecules
pkgs.influxdb2
None
pkgs.influxdb2-provision
Small utility to help provisioning influxdb2
pkgs.python313Packages.pdb2pqr
Software for determining titration states, adding missing atoms, and assigning charges/radii to biomolecules
pkgs.python314Packages.pdb2pqr
Software for determining titration states, adding missing atoms, and assigning charges/radii to biomolecules
pkgs.influxdb2-token-manipulator
Utility program to manipulate influxdb api tokens for declarative setups
pkgs.gnatPackages.gnatcoll-db2ada
GNAT Components Collection - Database packages
pkgs.gnat13Packages.gnatcoll-db2ada
GNAT Components Collection - Database packages
pkgs.gnat14Packages.gnatcoll-db2ada
GNAT Components Collection - Database packages
pkgs.gnat15Packages.gnatcoll-db2ada
GNAT Components Collection - Database packages
Package maintainers
-
@sternenseemann Lukas Epple <sternenseemann@systemli.org>
-
@oddlama oddlama <oddlama@oddlama.org>
-
@natsukium Tomoya Otabi <nixpkgs@natsukium.com>