CVE-2006-6638: Null Pointer Dereference
Published Dec 19, 2006
·Updated
IBM DB2 8.1 before FixPak 14 allows remote attackers to cause a denial of service via a crafted SQLJRA packet, which causes a NULL pointer dereference in the sqledb2raasrecvrequest function in DB2ENGN.DLL, a different issue than CVE-2006-4257.
Affected Software
13 affected components
IBM DB2 Universal Database=8.1.4
IBM DB2 Universal Database=8.1.6
IBM DB2 Universal Database=8.1
IBM DB2 Universal Database=8.10
IBM DB2 Universal Database=8.1.8a
IBM DB2 Universal Database=8.1.6c
IBM DB2 Universal Database=8.1.8
IBM DB2 Universal Database=8.1.7b
IBM DB2 Universal Database=8.1.5
IBM DB2 Universal Database=8.1.7
IBM DB2 Universal Database=8.1.9a
IBM DB2 Universal Database=8.1.9
IBM DB2 Universal Database=8.12
Remediation
Patch Available
Patch Available
Patch Available
Event History
Dec 19, 2006
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Data Sourced
via NVD·08:28 PM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2006-6638?
CVE-2006-6638 is classified as a denial of service vulnerability.
2
How do I fix CVE-2006-6638?
To fix CVE-2006-6638, update IBM DB2 to version 8.1 FixPak 14 or later.
3
What versions of IBM DB2 are affected by CVE-2006-6638?
CVE-2006-6638 affects IBM DB2 versions 8.1.4 through 8.1.9.
4
Can CVE-2006-6638 be exploited remotely?
Yes, CVE-2006-6638 can be exploited by remote attackers.
5
What type of systems are vulnerable to CVE-2006-6638?
CVE-2006-6638 affects systems running IBM DB2 Universal Database versions 8.1 on AIX and other platforms.