VulnerabilityModified
CVE-2016-0211
IBM DB2 9.7 through FP11, 9.8, 10.1 through FP5, and 10.5 through FP7 on Linux, UNIX, and Windows allows remote authenticated users to cause a denial of service (daemon crash) via a crafted DRDA message.
MEDIUM 4.3EPSS 2.13%
Does this matter?
Lower severity and a low EPSS score (2.13%). Track it; it rarely justifies an emergency change on its own.
Description
IBM DB2 9.7 through FP11, 9.8, 10.1 through FP5, and 10.5 through FP7 on Linux, UNIX, and Windows allows remote authenticated users to cause a denial of service (daemon crash) via a crafted DRDA message.
- CVSS 3.0
- 4.3 MEDIUMCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
- EPSS
- 2.13% probability · 81th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- ibm/db2 · ibm/db2 connect
- Source
- psirt@us.ibm.com
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT12462
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT12487
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT12488
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT13350
- http://www-01.ibm.com/support/docview.wss?uid=swg21979984Vendor Advisory
- http://www.securityfocus.com/bid/85979
- http://www.securitytracker.com/id/1035660
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT12462
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT12487
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT12488
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT13350
- http://www-01.ibm.com/support/docview.wss?uid=swg21979984Vendor Advisory
- http://www.securityfocus.com/bid/85979
- http://www.securitytracker.com/id/1035660
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.