CVE-2007-4423: IBM DB2 Universal Database

Medium severity, CVSS 5.0. EPSS: 3.5% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the AUTH_LIST_GROUPS_FOR_AUTHID function in IBM DB2 UDB 9.1 before Fixpak 3 allows attackers to cause a denial of service and possibly execute arbitrary code via a long argument.

Affected products

• IBM DB2 Universal Database: version 8.0 only; version 9.0 only; version 9.1 only

Published 2007-08-18. Last modified 2026-06-16.