Vulnerability in IBM Db2

CVE-2008-3959

IBM DB2 UDB 8.1 before FixPak 16, 8.2 before FixPak 9, and 9.1 before FixPak 4a allows remote attackers to cause a denial of service (instance crash) via a crafted SQLJRA packet within a CONNECT/ATTACH data stream that simulates a V7 client connect/attach request.

EPSS: 0.022 (80.6th percentile) — read the EPSS interpretation.

Affected products

Ibm Db2 — versions 8.1, 8.2
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (vendor-advisory, Patch, x_refsource_AIXAPAR)
cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
cve@mitre.org (x_refsource_MISC)