CVE-2012-4826

Severity: high (CVSS 8.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2012-10-20 · updated 2026-06-16
Weakness: CWE-119

Description

Stack-based buffer overflow in the SQL/PSM (aka SQL Persistent Stored Module) Stored Procedure (SP) infrastructure in IBM DB2 9.1, 9.5, 9.7 before FP7, 9.8, and 10.1 might allow remote authenticated users to execute arbitrary code by debugging a stored procedure.

Affected products

IBM Db2 for Linux, UNIX and Windows: 9.1, 9.5, 9.7, 9.7.0.1, 9.7.0.2, 9.7.0.3 (+5)

References

http://osvdb.org/86414
http://www-01.ibm.com/support/docview.wss?uid=swg1IC86765
http://www-01.ibm.com/support/docview.wss?uid=swg1IC86781
http://www-01.ibm.com/support/docview.wss?uid=swg1IC86782
http://www-01.ibm.com/support/docview.wss?uid=swg1IC86783
http://www-01.ibm.com/support/docview.wss?uid=swg1IC87192
http://www-01.ibm.com/support/docview.wss?uid=swg21450666
http://www-01.ibm.com/support/docview.wss?uid=swg21614536
http://www.securityfocus.com/bid/56133
http://osvdb.org/86414
http://www-01.ibm.com/support/docview.wss?uid=swg1IC86765
http://www-01.ibm.com/support/docview.wss?uid=swg1IC86781

Get alerted when CVE-2012-4826 or the next vulnerability affects your stack