PT-2016-4095 · Ibm · Ibm Db2

Publicado 2016-04-28 · Atualizado 2016-12-03 · CVE-2016-0211

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions IBM DB2 versions 9.7 through 9.7 FP11 IBM DB2 version 9.8 IBM DB2 versions 10.1 through 10.1 FP5 IBM DB2 versions 10.5 through 10.5 FP7

Description The issue allows remote authenticated users to cause a denial of service, resulting in a daemon crash, by sending a crafted DRDA message.

Recommendations For IBM DB2 version 9.8, update to a version that includes a fix for this issue. For IBM DB2 versions 9.7 through 9.7 FP11, update to a version that includes a fix for this issue. For IBM DB2 versions 10.1 through 10.1 FP5, update to a version that includes a fix for this issue. For IBM DB2 versions 10.5 through 10.5 FP7, update to a version that includes a fix for this issue.

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2016-0211

Produtos afetados

Ibm Db2

Referências · 9

• http://securitytracker.com/id/1035660 · Nota
• http://securityfocus.com/bid/85979 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-0211 · Nota de Segurança
• http://www-01.ibm.com/support/docview.wss?uid=swg1IT12488 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg1IT12462 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2016-0211 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg1IT13350 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg21979984 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg1IT12487 · Aviso do Fabricante