CVE-2014-6210

IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 through FP4, and 10.5 before FP5 on Linux, UNIX, and Windows allows remote authenticated users to cause a denial of service (daemon crash) by specifying the same column within multiple ALTER TABLE statements.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ibm:db2:9.7:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.8:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_connect:10.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_connect:10.5:*:*:*:*:*:*:*

History

21 Nov 2024, 02:13

Type Values Removed Values Added
References () http://secunia.com/advisories/62092 - () http://secunia.com/advisories/62092 -
References () http://www-01.ibm.com/support/docview.wss?uid=swg1IC96934 - () http://www-01.ibm.com/support/docview.wss?uid=swg1IC96934 -
References () http://www-01.ibm.com/support/docview.wss?uid=swg1IT04138 - Vendor Advisory () http://www-01.ibm.com/support/docview.wss?uid=swg1IT04138 - Vendor Advisory
References () http://www-01.ibm.com/support/docview.wss?uid=swg1IT05651 - () http://www-01.ibm.com/support/docview.wss?uid=swg1IT05651 -
References () http://www-01.ibm.com/support/docview.wss?uid=swg1IT05652 - () http://www-01.ibm.com/support/docview.wss?uid=swg1IT05652 -
References () http://www-01.ibm.com/support/docview.wss?uid=swg21690891 - () http://www-01.ibm.com/support/docview.wss?uid=swg21690891 -
References () http://www-01.ibm.com/support/docview.wss?uid=swg21693197 - () http://www-01.ibm.com/support/docview.wss?uid=swg21693197 -
References () http://www.securityfocus.com/bid/71730 - () http://www.securityfocus.com/bid/71730 -
References () http://www.securitytracker.com/id/1034572 - () http://www.securitytracker.com/id/1034572 -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/98685 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/98685 -

Information

Published : 2014-12-12 16:59

Updated : 2024-11-21 02:13


NVD link : CVE-2014-6210

Mitre link : CVE-2014-6210

CVE.ORG link : CVE-2014-6210


JSON object : View

Products Affected

ibm

  • db2
  • db2_connect
CWE
CWE-20

Improper Input Validation