CVE-2010-3735

2010-10-0518:00:33

CWE-399

[email protected]

web.nvd.nist.gov

CVSS2

2.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:H/Au:S/C:N/I:N/A:P

AI Score

5.9

Confidence

High

EPSS

0.003

Percentile

69.6%

JSON

The “Query Compiler, Rewrite, Optimizer” component in IBM DB2 UDB 9.5 before FP6a allows remote authenticated users to cause a denial of service (CPU consumption) via a crafted query involving certain UNION ALL views, leading to an indefinitely large amount of compilation time.

Affected configurations

Nvd

Node

ibmdb2Match9.5

ibmdb2Match9.5fp1

ibmdb2Match9.5fp2

ibmdb2Match9.5fp2a

ibmdb2Match9.5fp3

ibmdb2Match9.5fp3a

ibmdb2Match9.5fp3b

ibmdb2Match9.5fp4

ibmdb2Match9.5fp4a

ibmdb2Match9.5fp5

VendorProductVersionCPE
ibmdb29.5cpe:2.3:a:ibm:db2:9.5:*:*:*:*:*:*:*
ibmdb29.5cpe:2.3:a:ibm:db2:9.5:fp1:*:*:*:*:*:*
ibmdb29.5cpe:2.3:a:ibm:db2:9.5:fp2:*:*:*:*:*:*
ibmdb29.5cpe:2.3:a:ibm:db2:9.5:fp2a:*:*:*:*:*:*
ibmdb29.5cpe:2.3:a:ibm:db2:9.5:fp3:*:*:*:*:*:*
ibmdb29.5cpe:2.3:a:ibm:db2:9.5:fp3a:*:*:*:*:*:*
ibmdb29.5cpe:2.3:a:ibm:db2:9.5:fp3b:*:*:*:*:*:*
ibmdb29.5cpe:2.3:a:ibm:db2:9.5:fp4:*:*:*:*:*:*
ibmdb29.5cpe:2.3:a:ibm:db2:9.5:fp4a:*:*:*:*:*:*
ibmdb29.5cpe:2.3:a:ibm:db2:9.5:fp5:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	db2	9.5	cpe:2.3:a:ibm:db2:9.5:::::::*
ibm	db2	9.5	cpe:2.3:a:ibm:db2:9.5:fp1::::::
ibm	db2	9.5	cpe:2.3:a:ibm:db2:9.5:fp2::::::
ibm	db2	9.5	cpe:2.3:a:ibm:db2:9.5:fp2a::::::
ibm	db2	9.5	cpe:2.3:a:ibm:db2:9.5:fp3::::::
ibm	db2	9.5	cpe:2.3:a:ibm:db2:9.5:fp3a::::::
ibm	db2	9.5	cpe:2.3:a:ibm:db2:9.5:fp3b::::::
ibm	db2	9.5	cpe:2.3:a:ibm:db2:9.5:fp4::::::
ibm	db2	9.5	cpe:2.3:a:ibm:db2:9.5:fp4a::::::
ibm	db2	9.5	cpe:2.3:a:ibm:db2:9.5:fp5::::::