IBM DB2 for Linux UNIX and Windows (includes DB2 Connect Server) 9.7 10.1 10.5 and 11.1 is vulnerable to a buffer overflow which could allow an authenticated local attacker to execute arbitrary code on the system as root. IBM X-ForceID: 155893.