5

CVE-2009-0172

Unspecified vulnerability in IBM DB2 8 before FP17a, 9.1 before FP6a, and 9.5 before FP3a allows remote attackers to cause a denial of service (infinite loop) via a crafted CONNECT data stream.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Db2 Universal Database Version 9.1 Edition aix
Ibm ≫ Db2 Universal Database Version 9.1 Edition hp-ux
Ibm ≫ Db2 Universal Database Version 9.1 Edition linux
Ibm ≫ Db2 Universal Database Version 9.1 Edition solaris
Ibm ≫ Db2 Universal Database Version 9.1 Edition windows
Ibm ≫ Db2 Universal Database Version 9.1 Update fp2
Ibm ≫ Db2 Universal Database Version 9.1 Update fp2 Edition aix
Ibm ≫ Db2 Universal Database Version 9.1 Update fp2 Edition hp-ux
Ibm ≫ Db2 Universal Database Version 9.1 Update fp2 Edition linux
Ibm ≫ Db2 Universal Database Version 9.1 Update fp2 Edition solaris
Ibm ≫ Db2 Universal Database Version 9.1 Update fp2 Edition windows
Ibm ≫ Db2 Universal Database Version 9.1 Update fp3 Edition aix
Ibm ≫ Db2 Universal Database Version 9.1 Update fp3 Edition hp-ux
Ibm ≫ Db2 Universal Database Version 9.1 Update fp3 Edition solaris
Ibm ≫ Db2 Universal Database Version 9.1 Update fp4
Ibm ≫ Db2 Universal Database Version 9.1 Update fp4 Edition aix
Ibm ≫ Db2 Universal Database Version 9.1 Update fp4 Edition hp-ux
Ibm ≫ Db2 Universal Database Version 9.1 Update fp4 Edition linux
Ibm ≫ Db2 Universal Database Version 9.1 Update fp4 Edition windows
Ibm ≫ Db2 Universal Database Version 9.1 Update fp4a
Ibm ≫ Db2 Universal Database Version 9.1 Update fp4a Edition hp-ux
Ibm ≫ Db2 Universal Database Version 9.1 Update fp4a Edition linux
Ibm ≫ Db2 Universal Database Version 9.1 Update fp4a Edition windows
Ibm ≫ Db2 Universal Database Version 9.1 Update ga
Ibm ≫ Db2 Universal Database Version 9.5
Ibm ≫ Db2 Universal Database Version 9.5 Edition aix
Ibm ≫ Db2 Universal Database Version 9.5 Edition hp-ux
Ibm ≫ Db2 Universal Database Version 9.5 Edition linux
Ibm ≫ Db2 Universal Database Version 9.5 Edition solaris
Ibm ≫ Db2 Universal Database Version 9.5 Edition windows
Ibm ≫ Db2 Universal Database Version 9.5 Update fp1 Edition aix
Ibm ≫ Db2 Universal Database Version 9.5 Update fp1 Edition hp-ux
Ibm ≫ Db2 Universal Database Version 9.5 Update fp1 Edition linux
Ibm ≫ Db2 Universal Database Version 9.5 Update fp1 Edition solaris
Ibm ≫ Db2 Universal Database Version 9.5 Update fp1 Edition windows
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 8.47% 0.943
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT
ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT
ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v91/APARLIST.TXT
http://secunia.com/advisories/33529
Vendor Advisory
http://securitytracker.com/id?1021591
http://www-01.ibm.com/support/docview.wss?uid=swg1IZ37696
http://www-01.ibm.com/support/docview.wss?uid=swg21363936
Patch
Vendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg1IZ36534
Patch
Vendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg1IZ37697
Patch
Vendor Advisory
http://www.securityfocus.com/bid/33258
Patch
http://www.vupen.com/english/advisories/2009/0137
https://exchange.xforce.ibmcloud.com/vulnerabilities/47931