CVE-2008-4691
IBM DB2 < 9.1 - Denial of Service via SQLNLS_UNPADDEDCHARLEN Function
Title source: llmDescription
Unspecified vulnerability in the SQLNLS_UNPADDEDCHARLEN function in the New Compiler (aka Starburst derived compiler) component in the server in IBM DB2 9.1 before FP6 allows attackers to cause a denial of service (segmentation violation and trap) via unknown vectors.
References (5)
Core 5
Core References
Various Sources vendor-advisory
x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1LI73364
Various Sources x_refsource_confirm
ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v91/APARLIST.TXT
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2008/2893
Various Sources x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg27013892
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/32368
Scores
EPSS
0.0123
EPSS Percentile
65.9%
Details
Status
published
Products (2)
ibm/db2
9.1 (7 CPE variants)
ibm/db2
< 9.1
Published
Oct 22, 2008
Tracked Since
Feb 18, 2026