4

CVE-2010-3740

The Net Search Extender (NSE) implementation in the Text Search component in IBM DB2 UDB 9.5 before FP6a does not properly handle an alphanumeric Fuzzy search, which allows remote authenticated users to cause a denial of service (memory consumption and system hang) via the db2ext.textSearch function.

Data is provided by the National Vulnerability Database (NVD)
Ibm ≫ Db2 Version9.5
Ibm ≫ Db2 Version9.5 Updatefp1
Ibm ≫ Db2 Version9.5 Updatefp2
Ibm ≫ Db2 Version9.5 Updatefp2a
Ibm ≫ Db2 Version9.5 Updatefp3
Ibm ≫ Db2 Version9.5 Updatefp3a
Ibm ≫ Db2 Version9.5 Updatefp3b
Ibm ≫ Db2 Version9.5 Updatefp4
Ibm ≫ Db2 Version9.5 Updatefp4a
Ibm ≫ Db2 Version9.5 Updatefp5
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.41% 0.581
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 4 8 2.9
AV:N/AC:L/Au:S/C:N/I:N/A:P