6.8

CVE-2015-0157

IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX, and Windows allows remote authenticated users to cause a denial of service (daemon crash) by leveraging an unspecified scalar function in a SQL statement.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Db2 Version9.7 SwEditionadvanced_enterprise
Ibm ≫ Db2 Version9.7 SwEditionadvanced_workgroup
Ibm ≫ Db2 Version9.7 SwEditionenterprise
Ibm ≫ Db2 Version9.7 SwEditionexpress
Ibm ≫ Db2 Version9.7 SwEditionworkgroup
Ibm ≫ Db2 Version9.8 SwEditionadvanced_enterprise
Ibm ≫ Db2 Version9.8 SwEditionadvanced_workgroup
Ibm ≫ Db2 Version9.8 SwEditionenterprise
Ibm ≫ Db2 Version9.8 SwEditionexpress
Ibm ≫ Db2 Version9.8 SwEditionworkgroup
Ibm ≫ Db2 Version10.1 SwEditionadvanced_enterprise
Ibm ≫ Db2 Version10.1 SwEditionadvanced_workgroup
Ibm ≫ Db2 Version10.1 SwEditionenterprise
Ibm ≫ Db2 Version10.1 SwEditionexpress
Ibm ≫ Db2 Version10.1 SwEditionworkgroup
Ibm ≫ Db2 Version10.5 SwEditionadvanced_enterprise
Ibm ≫ Db2 Version10.5 SwEditionadvanced_workgroup
Ibm ≫ Db2 Version10.5 SwEditionenterprise
Ibm ≫ Db2 Version10.5 SwEditionexpress
Ibm ≫ Db2 Version10.5 SwEditionworkgroup
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.52% 0.828
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.8 8 6.9
AV:N/AC:L/Au:S/C:N/I:N/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www-01.ibm.com/support/docview.wss?uid=swg1IT07103
http://www-01.ibm.com/support/docview.wss?uid=swg1IT07107
http://www-01.ibm.com/support/docview.wss?uid=swg1IT07108
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1IT07109
http://www-01.ibm.com/support/docview.wss?uid=swg21697987
Patch
Vendor Advisory
http://www.securityfocus.com/bid/75947
http://www.securitytracker.com/id/1032882