CVE-2008-3858

Опубликовано: 28 авг. 2008

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

The Downlevel DB2RA Support component in IBM DB2 9.1 before Fixpak 4a allows remote attackers to cause a denial of service (instance crash) via a crafted CONNECT data stream that simulates a V7 client connect request.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:db2_universal_database:9.1:*:aix:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:9.1:*:hp_ux:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:9.1:*:linux:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:9.1:*:solaris:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:9.1:*:windows:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:aix:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:hp-ux:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:linux:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:solaris:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:windows:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:aix:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:hp-ux:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:linux:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:solaris:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:windows:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:aix:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:hp-ux:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:linux:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:solaris:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:windows:*:*:*:*:*

cpe:2.3:a:ibm:db2_universal_database:9.1:fp4a:aix:*:*:*:*:*

EPSS

Процентиль: 77%

0.01001

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-264

Связанные уязвимости

GHSA-452f-6cjx-8x7j

github

почти 4 года назад