CVE-2014-6159

IBM DB2 9.7 before FP10, 9.8 through FP5, 10.1 through FT4, and 10.5 through FP4 on Linux, UNIX, and Windows, when immediate AUTO_REVAL is enabled, allows remote authenticated users to cause a denial of service (daemon crash) via a crafted ALTER TABLE statement.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ibm:db2:9.7:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.8:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:10.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:10.5:*:*:*:*:*:*:*

History

21 Nov 2024, 02:13

Type Values Removed Values Added
References () http://secunia.com/advisories/62092 - () http://secunia.com/advisories/62092 -
References () http://secunia.com/advisories/62093 - () http://secunia.com/advisories/62093 -
References () http://www-01.ibm.com/support/docview.wss?uid=swg1IT04730 - () http://www-01.ibm.com/support/docview.wss?uid=swg1IT04730 -
References () http://www-01.ibm.com/support/docview.wss?uid=swg1IT05074 - () http://www-01.ibm.com/support/docview.wss?uid=swg1IT05074 -
References () http://www-01.ibm.com/support/docview.wss?uid=swg1IT05105 - Vendor Advisory () http://www-01.ibm.com/support/docview.wss?uid=swg1IT05105 - Vendor Advisory
References () http://www-01.ibm.com/support/docview.wss?uid=swg1IT05132 - () http://www-01.ibm.com/support/docview.wss?uid=swg1IT05132 -
References () http://www-01.ibm.com/support/docview.wss?uid=swg21688051 - Vendor Advisory () http://www-01.ibm.com/support/docview.wss?uid=swg21688051 - Vendor Advisory
References () http://www-01.ibm.com/support/docview.wss?uid=swg21693197 - () http://www-01.ibm.com/support/docview.wss?uid=swg21693197 -
References () http://www.securityfocus.com/bid/71006 - () http://www.securityfocus.com/bid/71006 -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/97708 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/97708 -

Information

Published : 2014-11-08 11:55

Updated : 2025-04-12 10:46


NVD link : CVE-2014-6159

Mitre link : CVE-2014-6159

CVE.ORG link : CVE-2014-6159


JSON object : View

Products Affected

ibm

  • db2
CWE
CWE-20

Improper Input Validation