First published: Mon Dec 28 2009(Updated: )
Unspecified vulnerability in the Query Compiler, Rewrite, and Optimizer component in IBM DB2 9.5 before FP5 allows remote authenticated users to cause a denial of service (instance crash) by compiling a SQL query.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
IBM DB2 Universal Database | =9.5-fp4 | |
IBM DB2 Universal Database | =9.5-fp4a | |
IBM DB2 Universal Database | =9.5-fp1 | |
IBM DB2 Universal Database | =9.5-fp2a | |
IBM DB2 Universal Database | =9.5-fp3b | |
IBM DB2 Universal Database | =9.5-fp2 | |
IBM DB2 Universal Database | =9.5-fp3 | |
IBM DB2 Universal Database | =9.5-fp3a |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2009-4439 is classified as a low severity vulnerability that can lead to a denial of service by crashing the DB2 instance.
To remediate CVE-2009-4439, upgrade your IBM DB2 to version 9.5 FP5 or later.
CVE-2009-4439 affects remote authenticated users of IBM DB2 version 9.5 before FP5.
CVE-2009-4439 involves an unspecified vulnerability in the Query Compiler, Rewrite, and Optimizer components of IBM DB2.
CVE-2009-4439 allows attackers to cause a denial of service by compiling malformed SQL queries.