Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveIbmCVE-2014-6209
HistoryDec 12, 2014 - 4:59 p.m.

CVE-2014-6209

2014-12-1216:59:00
CWE-20
ibm
web.nvd.nist.gov
33
ibm
db2
cve-2014-6209
denial of service
authenticated users

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

AI Score

6.2

Confidence

Low

EPSS

0.099

Percentile

94.9%

JSON

IBM DB2 9.5 through FP10, 9.7 through FP10, 9.8 through FP5, 10.1 through FP4, and 10.5 before FP5 on Linux, UNIX, and Windows allows remote authenticated users to cause a denial of service (daemon crash) by specifying an identity column within a crafted ALTER TABLE statement.

Affected configurations

Nvd
Node
ibmdb2Match9.5
OR
ibmdb2Match9.7
OR
ibmdb2Match10.1
OR
ibmdb2Match10.5
VendorProductVersionCPE
ibmdb29.5cpe:2.3:a:ibm:db2:9.5:*:*:*:*:*:*:*
ibmdb29.7cpe:2.3:a:ibm:db2:9.7:*:*:*:*:*:*:*
ibmdb210.1cpe:2.3:a:ibm:db2:10.1:*:*:*:*:*:*:*
ibmdb210.5cpe:2.3:a:ibm:db2:10.5:*:*:*:*:*:*:*

Related

prion 1
ibm 3
nvd 1
cvelist 1
openvas 1
nessus 4
prion
prion
Code injection
2014-12-12 16:59:00
ibm
ibm
Security Bulletin: IBM® DB2® LUW contains a vulnerability in which an ALTER TABLE statement on identity column may cause the DB2 server to terminate abnormally. (CVE-2014-6209)
2018-06-16 13:08:09
Security Bulletin: Infosphere BigInsights contains multiple vulnerabilities in which an ALTER TABLE statement may cause the Big SQL server to terminate abnormally. (CVE-2014-6159, CVE-2014-6209, CVE-2014-6210)
2020-07-18 23:22:56
Security Bulletin: Vulnerabilities in IBM DB2 for Linux, UNIX, and Windows affects IBM PureData System for Transactions (CVE-2014-6209, CVE-2014-6210, CVE-2014-8901)
2018-06-16 13:58:15
nvd
nvd
CVE-2014-6209
2014-12-12 16:59:00
cvelist
cvelist
CVE-2014-6209
2014-12-12 16:00:00
openvas
openvas
IBM Db2 Multiple Denial of Service Vulnerabilities
2015-01-08 00:00:00
nessus
nessus
IBM DB2 10.5 < Fix Pack 5 Multiple DoS Vulnerabilities
2015-04-16 00:00:00
IBM DB2 10.1 < Fix Pack 5 Multiple Vulnerabilities (Bar Mitzvah)
2016-04-15 00:00:00
IBM DB2 9.7 < Fix Pack 11 Multiple Vulnerabilities (Bar Mitzvah) (FREAK) (TLS POODLE)
2015-07-18 00:00:00

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

AI Score

6.2

Confidence

Low

EPSS

0.099

Percentile

94.9%

JSON
Related for CVE-2014-6209
prion1ibm3nvd1cvelist1openvas1nessus4