CVE-2009-2860: Medium severity ibm db2 universal database vulnerability
Published Aug 19, 2009
·Updated
Unspecified vulnerability in db2jds in IBM DB2 8.1 before FP18 allows remote attackers to cause a denial of service (service crash) via "malicious packets."
Affected Software
24 affected components
IBM DB2=8.1-fp1
IBM DB2=8.1-fp10
IBM DB2=8.1-fp6c
IBM DB2=8.1-fp2
IBM DB2<=8.1
IBM DB2=8.1-fp5
IBM DB2=8.1-fp8
IBM DB2=8.1-fp8a
IBM DB2=8.1-fp14
IBM DB2=8.1-fp11
IBM DB2=8.1-fp7
IBM DB2=8.1-fp6b
IBM DB2=8.1-fp17a
IBM DB2=8.1-fp15
IBM DB2=8.1-fp9a
IBM DB2=8.1-fp12
IBM DB2=8.1-fp4
IBM DB2=8.1-fp4a
IBM DB2=8.1-fp6
IBM DB2=8.1-fp13
IBM DB2=8.1-fp3
IBM DB2=8.1-fp7a
IBM DB2=8.1-fp9
IBM DB2=8.1-fp6a
Remediation
Patch Available
Patch Available
Event History
Aug 19, 2009
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-2860?
CVE-2009-2860 is classified as a denial of service vulnerability that can cause a crash.
2
How do I fix CVE-2009-2860?
To mitigate CVE-2009-2860, apply the latest IBM DB2 patches and updates available for your version.
3
Which versions of IBM DB2 are affected by CVE-2009-2860?
CVE-2009-2860 affects IBM DB2 version 8.1 prior to fix pack 18.
4
Can CVE-2009-2860 be exploited remotely?
Yes, CVE-2009-2860 can be exploited remotely using malicious packets.
5
What impact does CVE-2009-2860 have on system operations?
CVE-2009-2860 can lead to denial of service, causing the affected DB2 service to crash.