PT-2014-5085 · Ibm · Ibm Db2

Publicado 2014-09-04 · Atualizado 2017-08-29 · CVE-2014-3094

Positive Technologies (AI Summary)

CVSS v2.0

8.5

Alta

Vetor base

AV:N/AC:M/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM DB2 versions 9.7 through 9.7 FP9a IBM DB2 versions 9.8 through 9.8 FP5 IBM DB2 versions 10.1 through 10.1 FP4 IBM DB2 versions 10.5 before 10.5 FP4

Description A stack-based buffer overflow issue allows remote authenticated users to execute arbitrary code via a crafted ALTER MODULE statement.

Recommendations For IBM DB2 versions 9.7 through 9.7 FP9a, update to a version after 9.7 FP9a. For IBM DB2 versions 9.8 through 9.8 FP5, update to a version after 9.8 FP5. For IBM DB2 versions 10.1 through 10.1 FP4, update to a version after 10.1 FP4. For IBM DB2 versions 10.5 before 10.5 FP4, update to 10.5 FP4 or later.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2014-3094

Produtos afetados

Ibm Db2

Referências · 11

• http://secunia.com/advisories/58616 · Nota
• http://securityfocus.com/bid/69550 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/94260 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg1IT02594 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg21681631 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg1IT02593 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg1IT02592 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2014-3094 · Nota de Segurança
• http://www-01.ibm.com/support/docview.wss?uid=swg21683296 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg1IT02291 · Aviso do Fabricante
• http://secunia.com/advisories/60845 · Nota