VulnerabilityModified
CVE-2009-4439
Unspecified vulnerability in the Query Compiler, Rewrite, and Optimizer component in IBM DB2 9.5 before FP5 allows remote authenticated users to cause a denial of service (instance crash) by compiling a SQL query.
MEDIUM 4.0EPSS 1.99%
Does this matter?
Lower severity and a low EPSS score (1.99%). Track it; it rarely justifies an emergency change on its own.
Description
Unspecified vulnerability in the Query Compiler, Rewrite, and Optimizer component in IBM DB2 9.5 before FP5 allows remote authenticated users to cause a denial of service (instance crash) by compiling a SQL query.
- CVSS 2.0
- 4.0 MEDIUMAV:N/AC:L/Au:S/C:N/I:N/A:P
- EPSS
- 1.99% probability · 80th percentile
- CISA KEV
- Not listed
- Affected
- ibm/db2
- Source
- cve@mitre.org
References
- ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT
- http://secunia.com/advisories/37759Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1JR31948Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21293566Patch
- http://www-01.ibm.com/support/docview.wss?uid=swg21412902Vendor Advisory
- http://www.securityfocus.com/bid/37332
- http://www.vupen.com/english/advisories/2009/3520Patch, Vendor Advisory
- ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT
- http://secunia.com/advisories/37759Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1JR31948Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21293566Patch
- http://www-01.ibm.com/support/docview.wss?uid=swg21412902Vendor Advisory
- http://www.securityfocus.com/bid/37332
- http://www.vupen.com/english/advisories/2009/3520Patch, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.