CVE-2008-3958

Опубликовано: 11 сент. 2008

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

IBM DB2 UDB 8 before Fixpak 17 allows remote attackers to cause a denial of service (instance crash) via a crafted CONNECT/ATTACH data stream that simulates a V7 client connect/attach request. NOTE: this may overlap CVE-2008-3858. NOTE: this issue exists because of an incomplete fix for CVE-2008-3959.

Комментарий

http://secunia.com/advisories/31787

Some vulnerabilities have been reported in DB2, where some have an unknown impact and others can be exploited by malicious users to perform certain actions with escalated privileges, and by malicious people to cause a DoS or potentially compromise a vulnerable system.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:db2:*:fp16:*:*:*:*:*:*

Версия до 8.0 (включая)

cpe:2.3:a:ibm:db2:8.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:db2:8.0:fp10:*:*:*:*:*:*

cpe:2.3:a:ibm:db2:8.0:fp11:*:*:*:*:*:*

cpe:2.3:a:ibm:db2:8.0:fp12:*:*:*:*:*:*

cpe:2.3:a:ibm:db2:8.0:fp13:*:*:*:*:*:*

cpe:2.3:a:ibm:db2:8.0:fp14:*:*:*:*:*:*

cpe:2.3:a:ibm:db2:8.0:fp15:*:*:*:*:*:*

cpe:2.3:a:ibm:db2:8.0:fp2:*:*:*:*:*:*

cpe:2.3:a:ibm:db2:8.0:fp3:*:*:*:*:*:*

cpe:2.3:a:ibm:db2:8.0:fp4:*:*:*:*:*:*

cpe:2.3:a:ibm:db2:8.0:fp5:*:*:*:*:*:*

cpe:2.3:a:ibm:db2:8.0:fp6:*:*:*:*:*:*

cpe:2.3:a:ibm:db2:8.0:fp6a:*:*:*:*:*:*

cpe:2.3:a:ibm:db2:8.0:fp6b:*:*:*:*:*:*

cpe:2.3:a:ibm:db2:8.0:fp6c:*:*:*:*:*:*

cpe:2.3:a:ibm:db2:8.0:fp7:*:*:*:*:*:*

cpe:2.3:a:ibm:db2:8.0:fp7a:*:*:*:*:*:*

cpe:2.3:a:ibm:db2:8.0:fp7b:*:*:*:*:*:*

cpe:2.3:a:ibm:db2:8.0:fp8:*:*:*:*:*:*

cpe:2.3:a:ibm:db2:8.0:fp8a:*:*:*:*:*:*

cpe:2.3:a:ibm:db2:8.0:fp9:*:*:*:*:*:*

cpe:2.3:a:ibm:db2:8.0:fp9a:*:*:*:*:*:*

EPSS

Процентиль: 80%

0.01342

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-r9rm-x6jp-8r54

github

почти 4 года назад