CVE-2009-4325: Input Validation
The Client Interfaces component in IBM DB2 8.2 before FP18, 9.1 before FP8, 9.5 before FP5, and 9.7 before FP1 does not validate an unspecified pointer, which allows attackers to overwrite "external memory" via unknown vectors, related to a missing "check for null pointers."
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-4325?
CVE-2009-4325 has a medium severity rating due to the potential for attackers to overwrite external memory.
How do I fix CVE-2009-4325?
To fix CVE-2009-4325, upgrade to IBM DB2 versions 8.2 FP18 or later, 9.1 FP8 or later, 9.5 FP5 or later, or 9.7 FP1 or later.
What versions of IBM DB2 are affected by CVE-2009-4325?
CVE-2009-4325 affects IBM DB2 versions 8.2 before FP18, 9.1 before FP8, 9.5 before FP5, and 9.7 before FP1.
Is there a workaround for CVE-2009-4325?
There are no known effective workarounds for CVE-2009-4325; the recommended action is to apply the appropriate patches.
What type of attack does CVE-2009-4325 allow?
CVE-2009-4325 allows attackers to exploit a null pointer dereference vulnerability, potentially leading to arbitrary code execution.