CVE-2014-6209

IBM DB2 9.5 through FP10, 9.7 through FP10, 9.8 through FP5, 10.1 through FP4, and 10.5 before FP5 on Linux, UNIX, and Windows allows remote authenticated users to cause a denial of service (daemon crash) by specifying an identity column within a crafted ALTER TABLE statement.

Score

CVSS 2.0 4.0 Medium

Status

Modified - psirt@us.ibm.com

Published

2014-12-12

Last modified

2024-08-06

Weaknesses

CWE-20

Affected products

• Db2 (Ibm)

References

• http://secunia.com/advisories/62092
• http://www-01.ibm.com/support/docview.wss?uid=swg1IT04786
• http://www-01.ibm.com/support/docview.wss?uid=swg1IT05644
• http://www-01.ibm.com/support/docview.wss?uid=swg1IT05645
• http://www-01.ibm.com/support/docview.wss?uid=swg1IT05646
• http://www-01.ibm.com/support/docview.wss?uid=swg1IT05647
• http://www-01.ibm.com/support/docview.wss?uid=swg21690787
• http://www-01.ibm.com/support/docview.wss?uid=swg21693197
• http://www.securityfocus.com/bid/71729
• http://www.securitytracker.com/id/1034571
• https://exchange.xforce.ibmcloud.com/vulnerabilities/98684