CVE-2010-3736: Medium severity IBM DB2 vulnerability

Published Oct 5, 2010

Updated

Memory leak in the Relational Data Services component in IBM DB2 UDB 9.5 before FP6a, when the connection concentrator is enabled, allows remote authenticated users to cause a denial of service (heap memory consumption) by using a different code page than the database server.

Affected Software

10 affected components

IBM DB2=9.5

IBM DB2=9.5-fp4

IBM DB2=9.5-fp5

IBM DB2=9.5-fp4a

IBM DB2=9.5-fp1

IBM DB2=9.5-fp2a

IBM DB2=9.5-fp3b

IBM DB2=9.5-fp2

IBM DB2=9.5-fp3

IBM DB2=9.5-fp3a

Event History

Oct 5, 2010

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2010-3736?

CVE-2010-3736 is classified as a moderate severity vulnerability that can cause a denial of service due to memory consumption.

How do I fix CVE-2010-3736?

To fix CVE-2010-3736, update to IBM DB2 UDB version 9.5 FP6a or later.

What systems are affected by CVE-2010-3736?

CVE-2010-3736 affects IBM DB2 UDB version 9.5 and all versions prior to FP6a.

Can remote users exploit CVE-2010-3736?

Yes, remote authenticated users can exploit CVE-2010-3736 by using a different code page than the database server.

What is the impact of CVE-2010-3736?

The impact of CVE-2010-3736 is a denial of service condition caused by a memory leak in the Relational Data Services component.