CVE-2005-4736: Medium severity ibm db2 universal database vulnerability
Published Dec 31, 2005
·Updated
IBM DB2 Universal Database (UDB) 820 before 8.2 FP10 allows remote authenticated users to cause a denial of service (disk consumption) via a hash join (hsjn) that triggers an infinite loop in sqlrihsjnFlushBlocks.
Affected Software
12 affected components
IBM DB2 Universal Database=8.0
IBM DB2 Universal Database=8.1
IBM DB2 Universal Database=8.1.4
IBM DB2 Universal Database=8.1.5
IBM DB2 Universal Database=8.1.6
IBM DB2 Universal Database=8.1.6c
IBM DB2 Universal Database=8.1.7
IBM DB2 Universal Database=8.1.7b
IBM DB2 Universal Database=8.1.8
IBM DB2 Universal Database=8.1.8a
IBM DB2 Universal Database=8.1.9
IBM DB2 Universal Database=8.1.9a
Remediation
Patch Available
Patch Available
Patch Available
Event History
Dec 31, 2005
CVE Published
05:00 AM
Mar 19, 2006
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-4736?
CVE-2005-4736 is considered a denial of service vulnerability requiring remote authenticated access.
2
How do I fix CVE-2005-4736?
To fix CVE-2005-4736, it's recommended to apply IBM's fix pack 10 or later for the affected versions of DB2.
3
Which versions of IBM DB2 are affected by CVE-2005-4736?
IBM DB2 Universal Database versions prior to 8.2 FP10 are affected by CVE-2005-4736.
4
What type of attack does CVE-2005-4736 allow?
CVE-2005-4736 allows remote authenticated users to execute a denial of service attack due to disk consumption.
5
Is CVE-2005-4736 exploit publicly available?
While specific exploit code for CVE-2005-4736 may not be publicly available, the vulnerability can be exploited using a crafted query.