CVE-2012-0711 json
Integer signedness error in the db2dasrrm process in the DB2 Administration Server (DAS) in IBM DB2 9.1 through FP11, 9.5 before FP9, and 9…
published 2012-03-20 14 y ago modified 2026-06-16 4 mo ago also EUVD-2012-0743
- cvss
- 7.5
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 4.5%
- EPSS 4.5% chance of exploitation in 30 days, percentile 91%
- public exploits
- 0
- none known
Summary
Integer signedness error in the db2dasrrm process in the DB2 Administration Server (DAS) in IBM DB2 9.1 through FP11, 9.5 before FP9, and 9.7 through FP5 on UNIX platforms allows remote attackers to execute arbitrary code via a crafted request that triggers a heap-based buffer overflow.
Exploit prediction
4.52% chance of exploitation in the next 30 days, higher than 91% of all scored CVEs (FIRST EPSS, 2026-11-09).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Classification
- Weakness
-
- CWE-189 Numeric Errors
- Technology feeds
References
-
www-01.ibm.com
/support/docview.wss?uid=swg1IC80728
vendor-advisory
-
www-01.ibm.com
/support/docview.wss?uid=swg1IC80729
vendor-advisory
-
www-01.ibm.com
/support/docview.wss?uid=swg1IC80561
vendor-advisory
-
www-01.ibm.com
/support/docview.wss?uid=swg21588093
vendor-advisory
-
exchange.xforce.ibmcloud.com
/vulnerabilities/73495
vdb-entry
-
oval.cisecurity.org
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14842
vdb-entry, signature
-
securityfocus.com
/bid/77826
vdb-entry
Sources
- CVE List CVE-2012-0711
- NVD CVE-2012-0711
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.