CVE-2010-3740
First published: Tue Oct 05 2010(Updated: )
The Net Search Extender (NSE) implementation in the Text Search component in IBM DB2 UDB 9.5 before FP6a does not properly handle an alphanumeric Fuzzy search, which allows remote authenticated users to cause a denial of service (memory consumption and system hang) via the db2ext.textSearch function.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM DB2 Universal Database | =9.5 | |
| IBM DB2 Universal Database | =9.5-fp4 | |
| IBM DB2 Universal Database | =9.5-fp5 | |
| IBM DB2 Universal Database | =9.5-fp4a | |
| IBM DB2 Universal Database | =9.5-fp1 | |
| IBM DB2 Universal Database | =9.5-fp2a | |
| IBM DB2 Universal Database | =9.5-fp3b | |
| IBM DB2 Universal Database | =9.5-fp2 | |
| IBM DB2 Universal Database | =9.5-fp3 | |
| IBM DB2 Universal Database | =9.5-fp3a |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2010-3740?
CVE-2010-3740 has a medium severity rating that can lead to denial of service.
How do I fix CVE-2010-3740?
To fix CVE-2010-3740, upgrade IBM Db2 UDB to version 9.5 FP6a or later.
Who is affected by CVE-2010-3740?
Remote authenticated users of IBM Db2 UDB 9.5 before FP6a are affected by CVE-2010-3740.
What kind of vulnerability is CVE-2010-3740?
CVE-2010-3740 is a denial of service vulnerability affecting the text search functionality in IBM Db2.
What are the potential consequences of CVE-2010-3740?
The potential consequences of CVE-2010-3740 include memory consumption and system hang, impacting service availability.
- agent/references
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- agent/weakness
- agent/author
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/description
- agent/event
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/ibm
- canonical/ibm db2 universal database
- version/ibm db2 universal database/9.5
- version/ibm db2 universal database/9.5-fp4
- version/ibm db2 universal database/9.5-fp5
- version/ibm db2 universal database/9.5-fp4a
- version/ibm db2 universal database/9.5-fp1
- version/ibm db2 universal database/9.5-fp2a
- version/ibm db2 universal database/9.5-fp3b
- version/ibm db2 universal database/9.5-fp2
- version/ibm db2 universal database/9.5-fp3
- version/ibm db2 universal database/9.5-fp3a