5

CVE-2008-3959

IBM DB2 UDB 8.1 before FixPak 16, 8.2 before FixPak 9, and 9.1 before FixPak 4a allows remote attackers to cause a denial of service (instance crash) via a crafted SQLJRA packet within a CONNECT/ATTACH data stream that simulates a V7 client connect/attach request.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Db2 Updatefp15 Version <= 8.1
Ibm ≫ Db2 Updatefp8 Version <= 8.2
Ibm ≫ Db2 Version8.1 Updatefp1
Ibm ≫ Db2 Version8.1 Updatefp10
Ibm ≫ Db2 Version8.1 Updatefp11
Ibm ≫ Db2 Version8.1 Updatefp12
Ibm ≫ Db2 Version8.1 Updatefp13
Ibm ≫ Db2 Version8.1 Updatefp14
Ibm ≫ Db2 Version8.1 Updatefp2
Ibm ≫ Db2 Version8.1 Updatefp3
Ibm ≫ Db2 Version8.1 Updatefp4
Ibm ≫ Db2 Version8.1 Updatefp5
Ibm ≫ Db2 Version8.1 Updatefp6
Ibm ≫ Db2 Version8.1 Updatefp7
Ibm ≫ Db2 Version8.1 Updatefp8
Ibm ≫ Db2 Version8.1 Updatefp9
Ibm ≫ Db2 Version8.2
Ibm ≫ Db2 Version8.2 Updatefp1
Ibm ≫ Db2 Version8.2 Updatefp2
Ibm ≫ Db2 Version8.2 Updatefp3
Ibm ≫ Db2 Version8.2 Updatefp4
Ibm ≫ Db2 Version8.2 Updatefp5
Ibm ≫ Db2 Version8.2 Updatefp6
Ibm ≫ Db2 Version8.2 Updatefp7
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.89% 0.733
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P