CVE-2009-0172: Input Validation
Published Jan 16, 2009
·Updated
Unspecified vulnerability in IBM DB2 8 before FP17a, 9.1 before FP6a, and 9.5 before FP3a allows remote attackers to cause a denial of service (infinite loop) via a crafted CONNECT data stream.
Affected Software
35 affected components
IBM DB2 Universal Database=9.1
IBM DB2 Universal Database=9.1
IBM DB2 Universal Database=9.1
IBM DB2 Universal Database=9.1
IBM DB2 Universal Database=9.1
IBM DB2 Universal Database=9.1-fp2
IBM DB2 Universal Database=9.1-fp2
IBM DB2 Universal Database=9.1-fp2
IBM DB2 Universal Database=9.1-fp2
IBM DB2 Universal Database=9.1-fp2
IBM DB2 Universal Database=9.1-fp2
IBM DB2 Universal Database=9.1-fp3
IBM DB2 Universal Database=9.1-fp3
IBM DB2 Universal Database=9.1-fp3
IBM DB2 Universal Database=9.1-fp4
IBM DB2 Universal Database=9.1-fp4
IBM DB2 Universal Database=9.1-fp4
IBM DB2 Universal Database=9.1-fp4
IBM DB2 Universal Database=9.1-fp4
IBM DB2 Universal Database=9.1-fp4a
IBM DB2 Universal Database=9.1-fp4a
IBM DB2 Universal Database=9.1-fp4a
IBM DB2 Universal Database=9.1-fp4a
IBM DB2 Universal Database=9.1-ga
IBM DB2 Universal Database=9.5
IBM DB2 Universal Database=9.5
IBM DB2 Universal Database=9.5
IBM DB2 Universal Database=9.5
IBM DB2 Universal Database=9.5
IBM DB2 Universal Database=9.5
IBM DB2 Universal Database=9.5-fp1
IBM DB2 Universal Database=9.5-fp1
IBM DB2 Universal Database=9.5-fp1
IBM DB2 Universal Database=9.5-fp1
IBM DB2 Universal Database=9.5-fp1
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Jan 16, 2009
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Data Sourced
via NVD·09:30 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2009-0172?
The severity of CVE-2009-0172 is moderate, as it can lead to a denial of service through an infinite loop.
2
How do I fix CVE-2009-0172?
To fix CVE-2009-0172, apply the latest fix pack for IBM DB2 that addresses this vulnerability.
3
Which versions of IBM DB2 are affected by CVE-2009-0172?
CVE-2009-0172 affects IBM DB2 8 before FP17a, 9.1 before FP6a, and 9.5 before FP3a.
4
What type of vulnerability is CVE-2009-0172?
CVE-2009-0172 is an unspecified vulnerability that allows remote attackers to create a denial of service condition.
5
Can CVE-2009-0172 be exploited remotely?
Yes, CVE-2009-0172 can be exploited remotely through a crafted CONNECT data stream.