CVE-2009-1906

2022-10-0316:23:57

mitre

www.cve.org

ibm db2

drda services

denial of service

memory corruption

application crash

ipv6 address

correlation token

datadirect jdbc driver 3.7.32

6.4 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.0%

JSON

The DRDA Services component in IBM DB2 9.1 before FP7 and 9.5 before FP4 allows remote attackers to cause a denial of service (memory corruption and application crash) via an IPv6 address in the correlation token in the APPID string, as demonstrated by an APPID string sent by the third-party DataDirect JDBC driver 3.7.32.