First published: Tue Oct 05 2010(Updated: )
The Net Search Extender (NSE) implementation in the Text Search component in IBM DB2 UDB 9.5 before FP6a does not properly handle an alphanumeric Fuzzy search, which allows remote authenticated users to cause a denial of service (memory consumption and system hang) via the db2ext.textSearch function.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
IBM Db2 | =9.5 | |
IBM Db2 | =9.5-fp4 | |
IBM Db2 | =9.5-fp5 | |
IBM Db2 | =9.5-fp4a | |
IBM Db2 | =9.5-fp1 | |
IBM Db2 | =9.5-fp2a | |
IBM Db2 | =9.5-fp3b | |
IBM Db2 | =9.5-fp2 | |
IBM Db2 | =9.5-fp3 | |
IBM Db2 | =9.5-fp3a |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2010-3740 has a medium severity rating that can lead to denial of service.
To fix CVE-2010-3740, upgrade IBM Db2 UDB to version 9.5 FP6a or later.
Remote authenticated users of IBM Db2 UDB 9.5 before FP6a are affected by CVE-2010-3740.
CVE-2010-3740 is a denial of service vulnerability affecting the text search functionality in IBM Db2.
The potential consequences of CVE-2010-3740 include memory consumption and system hang, impacting service availability.