PT-2014-5085 · Ibm · Ibm Db2

Published 2014-09-04 · Updated 2017-08-29 · CVE-2014-3094

Positive Technologies (AI Summary)

CVSS v2.0

8.5

High

Base vector

AV:N/AC:M/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM DB2 versions 9.7 through 9.7 FP9a IBM DB2 versions 9.8 through 9.8 FP5 IBM DB2 versions 10.1 through 10.1 FP4 IBM DB2 versions 10.5 before 10.5 FP4

Description A stack-based buffer overflow issue allows remote authenticated users to execute arbitrary code via a crafted ALTER MODULE statement.

Recommendations For IBM DB2 versions 9.7 through 9.7 FP9a, update to a version after 9.7 FP9a. For IBM DB2 versions 9.8 through 9.8 FP5, update to a version after 9.8 FP5. For IBM DB2 versions 10.1 through 10.1 FP4, update to a version after 10.1 FP4. For IBM DB2 versions 10.5 before 10.5 FP4, update to 10.5 FP4 or later.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2014-3094

Affected Products

Ibm Db2

References · 11

• http://www-01.ibm.com/support/docview.wss?uid=swg1IT02594 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21681631 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1IT02593 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1IT02592 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-3094 · Security Note
• http://www-01.ibm.com/support/docview.wss?uid=swg1IT02291 · Vendor Advisory
• http://secunia.com/advisories/58616 · Note
• http://securityfocus.com/bid/69550 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/94260 · Note
• http://www-01.ibm.com/support/docview.wss?uid=swg21683296 · Note
• http://secunia.com/advisories/60845 · Note