CVE-2019-4101

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.1, 10.5, and 11.1 is vulnerable to a denial of service. Users that have both EXECUTE on PD_GET_DIAG_HIST and access to the diagnostic directory on the DB2 server can cause the instance to crash. IBM X-Force ID: 158091.

Score
CVSS 3.0 6.2 Medium
Status
Modified - psirt@us.ibm.com
Published
2019-07-01
Last modified
2024-09-16

Affected products

References