Description (CNA)
IBM GSKit (IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1) duplicates the PRNG state across fork() system calls when multiple ICC instances are loaded which could result in duplicate Session IDs and a risk of duplicate key material. IBM X-Force ID: 139071.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| IBM / DB2 for Linux, UNIX and Windows | affected 10.5; affected 10.1; affected 9.7; affected 11.1 |
CWE
No CWE identifiers supplied.
References
- http://www.ibm.com/support/docview.wss?uid=swg22013756
- https://exchange.xforce.ibmcloud.com/vulnerabilities/139071
- http://www.securityfocus.com/bid/105580
- http://www.securitytracker.com/id/1041012
ADP enrichment
No English description supplied.