CVE-2010-3740
IBM DB2 UDB 9.5 - Authenticated Denial of Service via Fuzzy Search in Net Search Extender
Title source: llmDescription
The Net Search Extender (NSE) implementation in the Text Search component in IBM DB2 UDB 9.5 before FP6a does not properly handle an alphanumeric Fuzzy search, which allows remote authenticated users to cause a denial of service (memory consumption and system hang) via the db2ext.textSearch function.
References (3)
Core 3
Core References
Various Sources x_refsource_confirm
ftp://public.dhe.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT
Vendor Advisory vendor-advisory
x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1IC66613
Third Party Advisory, VDB Entry vdb-entry
signature
x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13811
Scores
EPSS
0.0112
EPSS Percentile
62.9%
Details
CWE
CWE-399
Status
published
Products (1)
ibm/db2
9.5 (10 CPE variants)
Published
Oct 05, 2010
Tracked Since
Feb 18, 2026