Lucene search

IbmCVE-2015-0157

HistoryJul 20, 2015 - 1:59 a.m.

CVE-2015-0157

2015-07-2001:59:03

CWE-20

ibm

web.nvd.nist.gov

cve-2015-0157

ibm db2

denial of service

daemon crash

sql statement

nvd

vulnerability

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

AI Score

6.7

Confidence

Low

EPSS

0.073

Percentile

94.1%

JSON

IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX, and Windows allows remote authenticated users to cause a denial of service (daemon crash) by leveraging an unspecified scalar function in a SQL statement.

Affected configurations

Nvd

Node

ibmdb2Match9.7advanced_enterprise

ibmdb2Match9.7advanced_workgroup

ibmdb2Match9.7enterprise

ibmdb2Match9.7express

ibmdb2Match9.7workgroup

ibmdb2Match9.8advanced_enterprise

ibmdb2Match9.8advanced_workgroup

ibmdb2Match9.8enterprise

ibmdb2Match9.8express

ibmdb2Match9.8workgroup

ibmdb2Match10.1advanced_enterprise

ibmdb2Match10.1advanced_workgroup

ibmdb2Match10.1enterprise

ibmdb2Match10.1express

ibmdb2Match10.1workgroup

ibmdb2Match10.5advanced_enterprise

ibmdb2Match10.5advanced_workgroup

ibmdb2Match10.5enterprise

ibmdb2Match10.5express

ibmdb2Match10.5workgroup

VendorProductVersionCPE
ibmdb29.7cpe:2.3:a:ibm:db2:9.7:*:*:*:advanced_enterprise:*:*:*
ibmdb29.7cpe:2.3:a:ibm:db2:9.7:*:*:*:advanced_workgroup:*:*:*
ibmdb29.7cpe:2.3:a:ibm:db2:9.7:*:*:*:enterprise:*:*:*
ibmdb29.7cpe:2.3:a:ibm:db2:9.7:*:*:*:express:*:*:*
ibmdb29.7cpe:2.3:a:ibm:db2:9.7:*:*:*:workgroup:*:*:*
ibmdb29.8cpe:2.3:a:ibm:db2:9.8:*:*:*:advanced_enterprise:*:*:*
ibmdb29.8cpe:2.3:a:ibm:db2:9.8:*:*:*:advanced_workgroup:*:*:*
ibmdb29.8cpe:2.3:a:ibm:db2:9.8:*:*:*:enterprise:*:*:*
ibmdb29.8cpe:2.3:a:ibm:db2:9.8:*:*:*:express:*:*:*
ibmdb29.8cpe:2.3:a:ibm:db2:9.8:*:*:*:workgroup:*:*:*

Vendor	Product	Version	CPE
ibm	db2	9.7	cpe:2.3:a:ibm:db2:9.7::::advanced_enterprise:::
ibm	db2	9.7	cpe:2.3:a:ibm:db2:9.7::::advanced_workgroup:::
ibm	db2	9.7	cpe:2.3:a:ibm:db2:9.7::::enterprise:::
ibm	db2	9.7	cpe:2.3:a:ibm:db2:9.7::::express:::
ibm	db2	9.7	cpe:2.3:a:ibm:db2:9.7::::workgroup:::
ibm	db2	9.8	cpe:2.3:a:ibm:db2:9.8::::advanced_enterprise:::
ibm	db2	9.8	cpe:2.3:a:ibm:db2:9.8::::advanced_workgroup:::
ibm	db2	9.8	cpe:2.3:a:ibm:db2:9.8::::enterprise:::
ibm	db2	9.8	cpe:2.3:a:ibm:db2:9.8::::express:::
ibm	db2	9.8	cpe:2.3:a:ibm:db2:9.8::::workgroup:::