CVE-2012-2180

Severity

43%

Complexity

86%

Confidentiality

48%

Per: http://cwe.mitre.org/data/definitions/476.html 'CWE-476: NULL Pointer Dereference'

The chaining functionality in the Distributed Relational Database Architecture (DRDA) module in IBM DB2 9.7 before FP6 and 9.8 before FP5 allows remote attackers to cause a denial of service (NULL pointer dereference, and resource consumption or daemon crash) via a crafted request.

Per: http://cwe.mitre.org/data/definitions/476.html 'CWE-476: NULL Pointer Dereference'

CVSS 2.0 Base Score 4.3. CVSS Attack Vector: network. CVSS Attack Complexity: medium. CVSS Vector: (AV:N/AC:M/Au:N/C:N/I:N/A:P).

Overview

Type

IBM DB2

First reported 12 years ago

2012-06-20 10:27:00

Last updated 6 years ago

2018-10-02 10:29:00

Affected Software

IBM DB2 9.7

9.7

IBM DB2 9.7.0.1 (Fix Pack 1)

9.7.0.1

IBM DB2 9.7.0.2 (Fix Pack 2)

9.7.0.2

IBM DB2 9.7.0.3 (Fix Pack 3)

9.7.0.3

IBM DB2 9.7.0.4 (Fix Pack 4)

9.7.0.4

IBM DB2 9.7.0.5 (Fix Pack 5)

9.7.0.5

IBM DB2 9.8

9.8

IBM DB2 9.8.0.3 (Fix Pack 3)

9.8.0.3

IBM DB2 9.8.0.4 (Fix Pack 4)

9.8.0.4

References

IC82234

Vendor Advisory

IC82367

http://www.ibm.com/support/docview.wss?uid=swg21597090