First published: Sat Oct 23 2010(Updated: )
Stack consumption vulnerability in solid.exe in IBM solidDB 6.5.0.3 and earlier allows remote attackers to cause a denial of service (memory consumption and daemon crash) by connecting to TCP port 1315 and sending a packet with many integer fields, which trigger many recursive calls of a certain function.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
IBM solidDB | =4.5.175 | |
IBM solidDB | =6.1 | |
IBM solidDB | =6.0.1061 | |
IBM solidDB | =6.0.1060 | |
IBM solidDB | =6.30.0040 | |
IBM solidDB | =06.00.1018 | |
IBM solidDB | =6.3.33 | |
IBM solidDB | =4.5.178 | |
IBM solidDB | =4.5.176 | |
IBM solidDB | =6.30.0039 | |
IBM solidDB | =6.0.1064 | |
IBM solidDB | <=6.5.0.3 | |
IBM solidDB | =6.5.0.1 | |
IBM solidDB | =4.5.167 | |
IBM solidDB | =6.1.20 | |
IBM solidDB | =6.0.1066 | |
IBM solidDB | =4.5.173 | |
IBM solidDB | =4.5.169 | |
IBM solidDB | =4.5.168 | |
IBM solidDB | =6.5.0.2 | |
IBM solidDB | =6.3.37 | |
IBM solidDB | =6.5.0.0 | |
IBM solidDB | =06.30.0047 | |
IBM solidDB | =6.0.1065 | |
IBM solidDB | =6.30.0044 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2010-4055 is classified as a high severity vulnerability due to its potential for causing denial of service.
To fix CVE-2010-4055, update IBM solidDB to a version later than 6.5.0.3 where the vulnerability has been addressed.
CVE-2010-4055 can cause memory consumption and crash the daemon through stack consumption when exploited.
CVE-2010-4055 affects all versions of IBM solidDB up to and including 6.5.0.3.
Yes, CVE-2010-4055 can be exploited remotely by attackers connecting to TCP port 1315.