CVE-2018-1802

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 binaries load shared libraries from an untrusted path potentially giving low privilege user full access to the DB2 instance account by loading a malicious shared library. IBM X-Force ID: 149640.

• CWE-426

• http://www.ibm.com/support/docview.wss?uid=ibm10733122Vendor Advisory
• http://www.securityfocus.com/bid/105962Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1042082Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/149640VDB Entry, Vendor Advisory
• http://www.ibm.com/support/docview.wss?uid=ibm10733122Vendor Advisory
• http://www.securityfocus.com/bid/105962Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1042082Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/149640VDB Entry, Vendor Advisory

Published

Nov 9, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-18013* Xen Mobile through 10.8.0 includes a service listening on …
• CVE-2018-18014* Lack of authentication in Citrix Xen Mobile through 10.8 a…4.8
• CVE-2018-18016ImageMagick 7.0.7-28 has a memory leak vulnerability in Writ…
• CVE-2018-18017XSS exists in the Tribulant Slideshow Gallery plugin 1.6.8 f…
• CVE-2018-18018SQL Injection exists in the Tribulant Slideshow Gallery plug…
• CVE-2018-18019XSS exists in the Tribulant Slideshow Gallery plugin 1.6.8 f…
• CVE-2018-18020In QPDF 8.2.1, in libqpdf/QPDFWriter.cc, QPDFWriter::unparse…
• CVE-2018-18021arch/arm64/kvm/guest.c in KVM in the Linux kernel before 4.1…
• CVE-2018-18023In ImageMagick 7.0.8-13 Q16, there is a heap-based buffer ov…
• CVE-2018-18024In ImageMagick 7.0.8-13 Q16, there is an infinite loop in th…
• CVE-2018-18025In ImageMagick 7.0.8-13 Q16, there is a heap-based buffer ov…
• CVE-2018-18026IMFCameraProtect.sys in IObit Malware Fighter 6.2 (and possi…