CVE-2014-6210

IBM DB2 9.7-10.5 - Authenticated Denial of Service via ALTER TABLE Column Specification

Title source: llm
STIX 2.1

Description

IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 through FP4, and 10.5 before FP5 on Linux, UNIX, and Windows allows remote authenticated users to cause a denial of service (daemon crash) by specifying the same column within multiple ALTER TABLE statements.

References (10)

Core 10
Core References
Various Sources vendor-advisory x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1IT05652
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/62092
Various Sources vendor-advisory x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1IT05651
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/71730
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1034572
Vendor Advisory vendor-advisory x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1IT04138
Various Sources vendor-advisory x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1IC96934
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/98685
Various Sources x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21693197
Various Sources x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21690891

Scores

EPSS 0.0249
EPSS Percentile 82.7%

Details

CWE
CWE-20
Status published
Products (4)
ibm/db2 9.7
ibm/db2 9.8
ibm/db2_connect 10.1
ibm/db2_connect 10.5
Published Dec 12, 2014
Tracked Since Feb 18, 2026