CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
Confidence
High
EPSS
Percentile
90.9%
Buffer overflow in the TCP/IP listener in IBM DB2 Universal Database (UDB) before 8.1 FixPak 12 allows remote attackers to cause a denial of service (application crash) via a long MGRLVLLS message inside of an EXCSAT message when establishing a connection.
Vendor | Product | Version | CPE |
---|---|---|---|
ibm | db2_universal_database | * | cpe:2.3:a:ibm:db2_universal_database:*:*:*:*:*:*:*:* |
ibm | db2_universal_database | 8.0 | cpe:2.3:a:ibm:db2_universal_database:8.0:*:linux:*:*:*:*:* |
ibm | db2_universal_database | 8.1 | cpe:2.3:a:ibm:db2_universal_database:8.1:*:aix:*:*:*:*:* |
ibm | db2_universal_database | 8.1.4 | cpe:2.3:a:ibm:db2_universal_database:8.1.4:*:*:*:*:*:*:* |
ibm | db2_universal_database | 8.1.5 | cpe:2.3:a:ibm:db2_universal_database:8.1.5:*:*:*:*:*:*:* |
ibm | db2_universal_database | 8.1.6 | cpe:2.3:a:ibm:db2_universal_database:8.1.6:*:*:*:*:*:*:* |
ibm | db2_universal_database | 8.1.6c | cpe:2.3:a:ibm:db2_universal_database:8.1.6c:*:*:*:*:*:*:* |
ibm | db2_universal_database | 8.1.7 | cpe:2.3:a:ibm:db2_universal_database:8.1.7:*:*:*:*:*:*:* |
ibm | db2_universal_database | 8.1.7b | cpe:2.3:a:ibm:db2_universal_database:8.1.7b:*:*:*:*:*:*:* |
ibm | db2_universal_database | 8.1.8 | cpe:2.3:a:ibm:db2_universal_database:8.1.8:*:*:*:*:*:*:* |