PT-2016-4095 · Ibm · Ibm Db2

Published 2016-04-28 · Updated 2016-12-03 · CVE-2016-0211

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions IBM DB2 versions 9.7 through 9.7 FP11 IBM DB2 version 9.8 IBM DB2 versions 10.1 through 10.1 FP5 IBM DB2 versions 10.5 through 10.5 FP7

Description The issue allows remote authenticated users to cause a denial of service, resulting in a daemon crash, by sending a crafted DRDA message.

Recommendations For IBM DB2 version 9.8, update to a version that includes a fix for this issue. For IBM DB2 versions 9.7 through 9.7 FP11, update to a version that includes a fix for this issue. For IBM DB2 versions 10.1 through 10.1 FP5, update to a version that includes a fix for this issue. For IBM DB2 versions 10.5 through 10.5 FP7, update to a version that includes a fix for this issue.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2016-0211

Affected Products

Ibm Db2

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2016-0211 · Security Note
• http://www-01.ibm.com/support/docview.wss?uid=swg1IT12488 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1IT12462 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-0211 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1IT13350 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21979984 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1IT12487 · Vendor Advisory
• http://securitytracker.com/id/1035660 · Note
• http://securityfocus.com/bid/85979 · Note