CVE-2010-3740: Medium severity IBM DB2 vulnerability

Published Oct 5, 2010

Updated

The Net Search Extender (NSE) implementation in the Text Search component in IBM DB2 UDB 9.5 before FP6a does not properly handle an alphanumeric Fuzzy search, which allows remote authenticated users to cause a denial of service (memory consumption and system hang) via the db2ext.textSearch function.

Affected Software

10 affected components

IBM DB2=9.5

IBM DB2=9.5-fp4

IBM DB2=9.5-fp5

IBM DB2=9.5-fp4a

IBM DB2=9.5-fp1

IBM DB2=9.5-fp2a

IBM DB2=9.5-fp3b

IBM DB2=9.5-fp2

IBM DB2=9.5-fp3

IBM DB2=9.5-fp3a

Event History

Oct 5, 2010

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2010-3740?

CVE-2010-3740 has a medium severity rating that can lead to denial of service.

How do I fix CVE-2010-3740?

To fix CVE-2010-3740, upgrade IBM Db2 UDB to version 9.5 FP6a or later.

Who is affected by CVE-2010-3740?

Remote authenticated users of IBM Db2 UDB 9.5 before FP6a are affected by CVE-2010-3740.

What kind of vulnerability is CVE-2010-3740?

CVE-2010-3740 is a denial of service vulnerability affecting the text search functionality in IBM Db2.

What are the potential consequences of CVE-2010-3740?

The potential consequences of CVE-2010-3740 include memory consumption and system hang, impacting service availability.