CVE-2014-6210
IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 through FP4, and 10.5 before FP5 on Linux, UNIX, and Windows allows remote authenticated users to cause a denial of service (daemon crash) by specifying the same column within multiple ALTER TABLE statements.
- Score
- CVSS 2.0 4.0 Medium
- Status
- Modified - psirt@us.ibm.com
- Published
- 2014-12-12
- Last modified
- 2024-08-06
- Weaknesses
- CWE-20
Affected products
- Db2 (Ibm)
- Db2 Connect (Ibm)
References
- http://secunia.com/advisories/62092
- http://www-01.ibm.com/support/docview.wss?uid=swg1IC96934
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT04138
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT05651
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT05652
- http://www-01.ibm.com/support/docview.wss?uid=swg21690891
- http://www-01.ibm.com/support/docview.wss?uid=swg21693197
- http://www.securityfocus.com/bid/71730
- http://www.securitytracker.com/id/1034572
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98685
