CVE-2006-6638

IBM DB2 8.1 before FixPak 14 allows remote attackers to cause a denial of service via a crafted SQLJRA packet, which causes a NULL pointer dereference in the sqle_db2ra_as_recvrequest function in DB2ENGN.DLL, a different issue than CVE-2006-4257.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ibm:db2_universal_database:8.1:*:aix:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:8.1.4:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:8.1.5:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:8.1.6:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:8.1.6c:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:8.1.7:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:8.1.7b:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:8.1.8:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:8.1.8a:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:8.1.9:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:8.1.9a:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:8.10:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_universal_database:8.12:*:*:*:*:*:*:*

History

21 Nov 2024, 00:23

Type Values Removed Values Added
References () http://secunia.com/advisories/23397 - Patch, Vendor Advisory () http://secunia.com/advisories/23397 - Patch, Vendor Advisory
References () http://www-1.ibm.com/support/docview.wss?uid=swg1IY91847 - Patch () http://www-1.ibm.com/support/docview.wss?uid=swg1IY91847 - Patch
References () http://www.appsecinc.com/resources/alerts/db2/2006-11-30.shtml - Patch, Vendor Advisory () http://www.appsecinc.com/resources/alerts/db2/2006-11-30.shtml - Patch, Vendor Advisory
References () http://www.securityfocus.com/bid/21646 - Patch () http://www.securityfocus.com/bid/21646 - Patch

Information

Published : 2006-12-19 20:28

Updated : 2024-11-21 00:23


NVD link : CVE-2006-6638

Mitre link : CVE-2006-6638

CVE.ORG link : CVE-2006-6638


JSON object : View

Products Affected

ibm

  • db2_universal_database