4

CVE-2014-6210

IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 through FP4, and 10.5 before FP5 on Linux, UNIX, and Windows allows remote authenticated users to cause a denial of service (daemon crash) by specifying the same column within multiple ALTER TABLE statements.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Db2 Version9.7
Ibm ≫ Db2 Version9.8
Ibm ≫ Db2 Connect Version10.1
Ibm ≫ Db2 Connect Version10.5
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.49% 0.826
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4 8 2.9
AV:N/AC:L/Au:S/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://secunia.com/advisories/62092
http://www-01.ibm.com/support/docview.wss?uid=swg21693197
http://www-01.ibm.com/support/docview.wss?uid=swg1IC96934
http://www-01.ibm.com/support/docview.wss?uid=swg1IT04138
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1IT05651
http://www-01.ibm.com/support/docview.wss?uid=swg1IT05652
http://www-01.ibm.com/support/docview.wss?uid=swg21690891
http://www.securityfocus.com/bid/71730
http://www.securitytracker.com/id/1034572
https://exchange.xforce.ibmcloud.com/vulnerabilities/98685