Описание
IBM DB2 9.7, 10.1 before FP6, and 10.5 before FP8 on AIX, Linux, HP, Solaris and Windows allow remote authenticated users to cause a denial of service (daemon crash) via a SELECT statement with a subquery containing the AVG OLAP function on an Oracle compatible database.
Ссылки
- PatchVendor Advisory
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одновременно
Одно из
cpe:2.3:a:ibm:db2:9.7:*:*:*:advanced_enterprise_server:*:*:*
cpe:2.3:a:ibm:db2:9.7:*:*:*:advanced_workgroup_server:*:*:*
cpe:2.3:a:ibm:db2:9.7:*:*:*:connect_application_server:*:*:*
cpe:2.3:a:ibm:db2:9.7:*:*:*:connect_enterprise:*:*:*
cpe:2.3:a:ibm:db2:9.7:*:*:*:connect_unlimited:system_i:*:*
cpe:2.3:a:ibm:db2:9.7:*:*:*:connect_unlimited:system_z:*:*
cpe:2.3:a:ibm:db2:9.7:*:*:*:enterprise_server:*:*:*
cpe:2.3:a:ibm:db2:9.7:*:*:*:express:*:*:*
cpe:2.3:a:ibm:db2:9.7:*:*:*:workgroup_server:*:*:*
cpe:2.3:a:ibm:db2:10.1:*:*:*:advanced_enterprise_server:*:*:*
cpe:2.3:a:ibm:db2:10.1:*:*:*:advanced_workgroup_server:*:*:*
cpe:2.3:a:ibm:db2:10.1:*:*:*:connect_application_server:*:*:*
cpe:2.3:a:ibm:db2:10.1:*:*:*:connect_enterprise:*:*:*
cpe:2.3:a:ibm:db2:10.1:*:*:*:connect_unlimited:system_i:*:*
cpe:2.3:a:ibm:db2:10.1:*:*:*:connect_unlimited:system_z:*:*
cpe:2.3:a:ibm:db2:10.1:*:*:*:enterprise_server:*:*:*
cpe:2.3:a:ibm:db2:10.1:*:*:*:express:*:*:*
cpe:2.3:a:ibm:db2:10.1:*:*:*:workgroup_server:*:*:*
cpe:2.3:a:ibm:db2:10.5:*:*:*:advanced_enterprise_server:*:*:*
cpe:2.3:a:ibm:db2:10.5:*:*:*:advanced_workgroup_server:*:*:*
cpe:2.3:a:ibm:db2:10.5:*:*:*:connect_application_server:*:*:*
cpe:2.3:a:ibm:db2:10.5:*:*:*:connect_enterprise:*:*:*
cpe:2.3:a:ibm:db2:10.5:*:*:*:connect_unlimited:system_i:*:*
cpe:2.3:a:ibm:db2:10.5:*:*:*:connect_unlimited:system_z:*:*
cpe:2.3:a:ibm:db2:10.5:*:*:*:enterprise_server:*:*:*
cpe:2.3:a:ibm:db2:10.5:*:*:*:express:*:*:*
cpe:2.3:a:ibm:db2:10.5:*:*:*:workgroup_server:*:*:*
Одно из
cpe:2.3:o:hp:hp-ux:-:*:*:*:*:*:*:*
cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
cpe:2.3:o:oracle:solaris:-:*:*:*:*:*:*:*
Конфигурация 2
Одновременно
cpe:2.3:a:ibm:db2:9.8:*:*:*:enterprise_server:*:*:*
Одно из
cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
EPSS
Процентиль: 67%
0.00538
Низкий
6.5 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-20
Связанные уязвимости
CVSS3: 6.5
github
больше 3 лет назад
IBM DB2 9.7, 10.1 before FP6, and 10.5 before FP8 on AIX, Linux, HP, Solaris and Windows allow remote authenticated users to cause a denial of service (daemon crash) via a SELECT statement with a subquery containing the AVG OLAP function on an Oracle compatible database.
EPSS
Процентиль: 67%
0.00538
Низкий
6.5 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-20