Lucene search

K
jvnJapan Vulnerability NotesJVN:16308183
HistoryMar 04, 2011 - 12:00 a.m.

JVN#16308183: IBM DB2 vulnerable to denial-of-service (DoS)

2011-03-0400:00:00
Japan Vulnerability Notes
jvn.jp
21

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.041 Low

EPSS

Percentile

92.1%

IBM DB2 contains a denial-of-service (DoS) vulnerability due to an issue in Java Runtime Environment (JRE).

Impact

An attacker that can create or execute stored procedures may cause a denial-of-service (DoS).

Solution

****Apply a patch
Apply the appropriate patch according to the information provided by the developer.

Products Affected

  • DB2 for Linux, UNIX, and Windows Version 9.7 FP0 to FP3a
  • DB2 for Linux, UNIX, and Windows Version 9.5 FP0 to FP7
  • DB2 for Linux, UNIX, and Windows Version 9.1 FP0 to FP10

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.041 Low

EPSS

Percentile

92.1%