CVE-2013-3475: IBM DB2

High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days.

Stack-based buffer overflow in db2aud in the Audit Facility in IBM DB2 and DB2 Connect 9.1, 9.5, 9.7, 9.8, and 10.1, as used in Smart Analytics System 7600 and other products, allows local users to gain privileges via unspecified vectors.

Affected products

• IBM DB2: version 9.1 only; version 9.5 only; version 9.7 only; version 9.8 only; version 10.1 only
• IBM DB2 Connect: version 9.1 only; version 9.5 only; version 9.7 only; version 9.8 only; version 10.1 only
• IBM Smart Analytics System 7600: affected versions not specified

Published 2013-06-05. Last modified 2026-06-16.