4.3

CVE-2008-3858

The Downlevel DB2RA Support component in IBM DB2 9.1 before Fixpak 4a allows remote attackers to cause a denial of service (instance crash) via a crafted CONNECT data stream that simulates a V7 client connect request.

Data is provided by the National Vulnerability Database (NVD)
Ibm ≫ Db2 Universal Database Version9.1 Editionaix
Ibm ≫ Db2 Universal Database Version9.1 Editionhp_ux
Ibm ≫ Db2 Universal Database Version9.1 Editionlinux
Ibm ≫ Db2 Universal Database Version9.1 Editionsolaris
Ibm ≫ Db2 Universal Database Version9.1 Editionwindows
Ibm ≫ Db2 Universal Database Version9.1 Updatefp2 Editionaix
Ibm ≫ Db2 Universal Database Version9.1 Updatefp2 Editionhp-ux
Ibm ≫ Db2 Universal Database Version9.1 Updatefp2 Editionlinux
Ibm ≫ Db2 Universal Database Version9.1 Updatefp2 Editionsolaris
Ibm ≫ Db2 Universal Database Version9.1 Updatefp2 Editionwindows
Ibm ≫ Db2 Universal Database Version9.1 Updatefp3 Editionaix
Ibm ≫ Db2 Universal Database Version9.1 Updatefp3 Editionhp-ux
Ibm ≫ Db2 Universal Database Version9.1 Updatefp3 Editionlinux
Ibm ≫ Db2 Universal Database Version9.1 Updatefp3 Editionsolaris
Ibm ≫ Db2 Universal Database Version9.1 Updatefp3 Editionwindows
Ibm ≫ Db2 Universal Database Version9.1 Updatefp4 Editionaix
Ibm ≫ Db2 Universal Database Version9.1 Updatefp4 Editionhp-ux
Ibm ≫ Db2 Universal Database Version9.1 Updatefp4 Editionlinux
Ibm ≫ Db2 Universal Database Version9.1 Updatefp4 Editionsolaris
Ibm ≫ Db2 Universal Database Version9.1 Updatefp4 Editionwindows
Ibm ≫ Db2 Universal Database Version9.1 Updatefp4a Editionaix
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 1% 0.76
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:N/A:P