Lucene search

K
cve[email protected]CVE-2012-2180
HistoryJun 20, 2012 - 10:27 a.m.

CVE-2012-2180

2012-06-2010:27:28
web.nvd.nist.gov
288
ibm
db2
drda
remote attackers
denial of service
vulnerability
cve-2012-2180
nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

6.6 Medium

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

80.6%

The chaining functionality in the Distributed Relational Database Architecture (DRDA) module in IBM DB2 9.7 before FP6 and 9.8 before FP5 allows remote attackers to cause a denial of service (NULL pointer dereference, and resource consumption or daemon crash) via a crafted request.

Affected configurations

NVD
Node
ibmdb2Match9.7
OR
ibmdb2Match9.7.0.1
OR
ibmdb2Match9.7.0.2
OR
ibmdb2Match9.7.0.3
OR
ibmdb2Match9.7.0.4
OR
ibmdb2Match9.7.0.5
Node
ibmdb2Match9.8
OR
ibmdb2Match9.8.0.3
OR
ibmdb2Match9.8.0.4

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

6.6 Medium

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

80.6%