CVE-2009-2858
IBM DB2 < 8.1 - Denial of Service via Memory Leak in Security Component
Title source: llmDescription
Memory leak in the Security component in IBM DB2 8.1 before FP18 on Unix platforms allows attackers to cause a denial of service (memory consumption) via unspecified vectors, related to private memory within the DB2 memory structure.
References (4)
Core 4
Core References
Various Sources x_refsource_confirm
ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT
Patch x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg24024075
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/36313
Various Sources vendor-advisory
x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1IZ35635
Scores
EPSS
0.0166
EPSS Percentile
74.2%
Details
CWE
CWE-399
Status
published
Products (2)
ibm/db2
8.1 fp1 (23 CPE variants)
ibm/db2
< 8.1
Published
Aug 19, 2009
Tracked Since
Feb 18, 2026