4.3

CVE-2012-2180

EPSS 1%
Veröffentlicht 20.06.2012 10:27:28
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle psirt@us.ibm.com
Teams Watchlist Login
Unerledigt Login

The chaining functionality in the Distributed Relational Database Architecture (DRDA) module in IBM DB2 9.7 before FP6 and 9.8 before FP5 allows remote attackers to cause a denial of service (NULL pointer dereference, and resource consumption or daemon crash) via a crafted request.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 8

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ibm ≫ Db2 Version9.7

Ibm ≫ Db2 Version9.7.0.1

Ibm ≫ Db2 Version9.7.0.2

Ibm ≫ Db2 Version9.7.0.3

Ibm ≫ Db2 Version9.7.0.4

Ibm ≫ Db2 Version9.7.0.5

Ibm ≫ Db2 Version9.8

Ibm ≫ Db2 Version9.8.0.3

Ibm ≫ Db2 Version9.8.0.4

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1%	0.749

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:N/A:P

http://www.ibm.com/support/docview.wss?uid=swg1IC82234

Vendor Advisory

http://www.ibm.com/support/docview.wss?uid=swg1IC82367

http://www.ibm.com/support/docview.wss?uid=swg21597090

Vendor Advisory

http://www.securityfocus.com/bid/53873

https://exchange.xforce.ibmcloud.com/vulnerabilities/75418

https://nvd.nist.gov/vuln/detail/CVE-2012-2180

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2012-2180

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2012-2180

EUVD