Lucene search

K
cveIbmCVE-2012-0712
HistoryMar 20, 2012 - 8:55 p.m.

CVE-2012-0712

2012-03-2020:55:01
CWE-399
ibm
web.nvd.nist.gov
290
ibm
db2
xml
security
vulnerability
denial of service
cve-2012-0712

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

AI Score

6.2

Confidence

Low

EPSS

0.007

Percentile

79.8%

The XML feature in IBM DB2 9.5 before FP9, 9.7 through FP5, and 9.8 through FP4 allows remote authenticated users to cause a denial of service (infinite loop) by calling the XMLPARSE function with a crafted string expression.

Affected configurations

Nvd
Node
ibmdb2Match9.5
OR
ibmdb2Match9.5fp1
OR
ibmdb2Match9.5fp2
OR
ibmdb2Match9.5fp2a
OR
ibmdb2Match9.5fp3
OR
ibmdb2Match9.5fp3a
OR
ibmdb2Match9.5fp3b
OR
ibmdb2Match9.5fp4
OR
ibmdb2Match9.5fp4a
OR
ibmdb2Match9.5fp5
OR
ibmdb2Match9.5fp6
OR
ibmdb2Match9.5fp6a
OR
ibmdb2Match9.5fp7
OR
ibmdb2Match9.5fp8
OR
ibmdb2Match9.7
OR
ibmdb2Match9.7fp1
OR
ibmdb2Match9.7fp2
OR
ibmdb2Match9.7fp3
OR
ibmdb2Match9.7fp3a
OR
ibmdb2Match9.7fp4
OR
ibmdb2Match9.7fp5
OR
ibmdb2Match9.8
OR
ibmdb2Match9.8fp3
OR
ibmdb2Match9.8fp4
VendorProductVersionCPE
ibmdb29.5cpe:2.3:a:ibm:db2:9.5:*:*:*:*:*:*:*
ibmdb29.5cpe:2.3:a:ibm:db2:9.5:fp1:*:*:*:*:*:*
ibmdb29.5cpe:2.3:a:ibm:db2:9.5:fp2:*:*:*:*:*:*
ibmdb29.5cpe:2.3:a:ibm:db2:9.5:fp2a:*:*:*:*:*:*
ibmdb29.5cpe:2.3:a:ibm:db2:9.5:fp3:*:*:*:*:*:*
ibmdb29.5cpe:2.3:a:ibm:db2:9.5:fp3a:*:*:*:*:*:*
ibmdb29.5cpe:2.3:a:ibm:db2:9.5:fp3b:*:*:*:*:*:*
ibmdb29.5cpe:2.3:a:ibm:db2:9.5:fp4:*:*:*:*:*:*
ibmdb29.5cpe:2.3:a:ibm:db2:9.5:fp4a:*:*:*:*:*:*
ibmdb29.5cpe:2.3:a:ibm:db2:9.5:fp5:*:*:*:*:*:*
Rows per page:
1-10 of 241

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

AI Score

6.2

Confidence

Low

EPSS

0.007

Percentile

79.8%