CVE-2012-2180

IBM DB2 9.7-9.8 - Denial of Service via DRDA Chaining Request

Title source: llm
STIX 2.1

Description

The chaining functionality in the Distributed Relational Database Architecture (DRDA) module in IBM DB2 9.7 before FP6 and 9.8 before FP5 allows remote attackers to cause a denial of service (NULL pointer dereference, and resource consumption or daemon crash) via a crafted request.

References (5)

Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/75418
Vendor Advisory vendor-advisory x_refsource_aixapar
http://www.ibm.com/support/docview.wss?uid=swg1IC82234
Vendor Advisory x_refsource_confirm
http://www.ibm.com/support/docview.wss?uid=swg21597090
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/53873
Various Sources vendor-advisory x_refsource_aixapar
http://www.ibm.com/support/docview.wss?uid=swg1IC82367

Scores

EPSS 0.0204
EPSS Percentile 79.1%

Details

Status published
Products (9)
ibm/db2 9.7
ibm/db2 9.7.0.1
ibm/db2 9.7.0.2
ibm/db2 9.7.0.3
ibm/db2 9.7.0.4
ibm/db2 9.7.0.5
ibm/db2 9.8
ibm/db2 9.8.0.3
ibm/db2 9.8.0.4
Published Jun 20, 2012
Tracked Since Feb 18, 2026