CVE-2007-6052

IBM DB2 Universal Database < 9.1 - Denial of Service via Vector Aggregation Overflow

Title source: llm
STIX 2.1

Description

IBM DB2 UDB 9.1 before Fixpak 4 does not properly perform vector aggregation, which might allow attackers to cause a denial of service (divide-by-zero error and DBMS crash), related to an "overflow." NOTE: the vendor description of this issue is too vague to be certain that it is security-related.

References (4)

Core 4
Core References
Various Sources x_refsource_confirm
http://www-1.ibm.com/support/docview.wss?uid=swg21255607
Various Sources vendor-advisory x_refsource_aixapar
http://www-1.ibm.com/support/docview.wss?uid=swg1IZ08205
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/3867
Patch vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/26450

Scores

EPSS 0.0131
EPSS Percentile 67.7%

Details

Status published
Products (1)
ibm/db2_universal_database < 9.1
Published Nov 20, 2007
Tracked Since Feb 18, 2026