VulnerabilityModified
CVE-2014-6159
IBM DB2 9.7 before FP10, 9.8 through FP5, 10.1 through FT4, and 10.5 through FP4 on Linux, UNIX, and Windows, when immediate AUTO_REVAL is enabled, allows remote authenticated users to cause a denial of service (daemon crash) via a crafted ALTER TABLE…
LOW 3.5EPSS 2.12%
Does this matter?
Lower severity and a low EPSS score (2.12%). Track it; it rarely justifies an emergency change on its own.
Description
IBM DB2 9.7 before FP10, 9.8 through FP5, 10.1 through FT4, and 10.5 through FP4 on Linux, UNIX, and Windows, when immediate AUTO_REVAL is enabled, allows remote authenticated users to cause a denial of service (daemon crash) via a crafted ALTER TABLE statement.
- CVSS 2.0
- 3.5 LOWAV:N/AC:M/Au:S/C:N/I:N/A:P
- EPSS
- 2.12% probability · 81th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- ibm/db2
- Source
- psirt@us.ibm.com
References
- http://secunia.com/advisories/62092
- http://secunia.com/advisories/62093
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT04730
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT05074
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT05105Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT05132
- http://www-01.ibm.com/support/docview.wss?uid=swg21688051Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21693197
- http://www.securityfocus.com/bid/71006
- https://exchange.xforce.ibmcloud.com/vulnerabilities/97708
- http://secunia.com/advisories/62092
- http://secunia.com/advisories/62093
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT04730
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT05074
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT05105Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT05132
- http://www-01.ibm.com/support/docview.wss?uid=swg21688051Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21693197
- http://www.securityfocus.com/bid/71006
- https://exchange.xforce.ibmcloud.com/vulnerabilities/97708
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.