4

CVE-2012-0712

The XML feature in IBM DB2 9.5 before FP9, 9.7 through FP5, and 9.8 through FP4 allows remote authenticated users to cause a denial of service (infinite loop) by calling the XMLPARSE function with a crafted string expression.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Db2 Version 9.5
Ibm ≫ Db2 Version 9.5 Update fp1
Ibm ≫ Db2 Version 9.5 Update fp2
Ibm ≫ Db2 Version 9.5 Update fp2a
Ibm ≫ Db2 Version 9.5 Update fp3
Ibm ≫ Db2 Version 9.5 Update fp3a
Ibm ≫ Db2 Version 9.5 Update fp3b
Ibm ≫ Db2 Version 9.5 Update fp4
Ibm ≫ Db2 Version 9.5 Update fp4a
Ibm ≫ Db2 Version 9.5 Update fp5
Ibm ≫ Db2 Version 9.5 Update fp6
Ibm ≫ Db2 Version 9.5 Update fp6a
Ibm ≫ Db2 Version 9.5 Update fp7
Ibm ≫ Db2 Version 9.5 Update fp8
Ibm ≫ Db2 Version 9.7
Ibm ≫ Db2 Version 9.7 Update fp1
Ibm ≫ Db2 Version 9.7 Update fp2
Ibm ≫ Db2 Version 9.7 Update fp3
Ibm ≫ Db2 Version 9.7 Update fp3a
Ibm ≫ Db2 Version 9.7 Update fp4
Ibm ≫ Db2 Version 9.7 Update fp5
Ibm ≫ Db2 Version 9.8
Ibm ≫ Db2 Version 9.8 Update fp3
Ibm ≫ Db2 Version 9.8 Update fp4
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.04% 0.791
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4 8 2.9
AV:N/AC:L/Au:S/C:N/I:N/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www-01.ibm.com/support/docview.wss?uid=swg1IC81379
http://www-01.ibm.com/support/docview.wss?uid=swg1IC81380
http://www-01.ibm.com/support/docview.wss?uid=swg1IC81837
http://www-01.ibm.com/support/docview.wss?uid=swg21588098
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/73496
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14450