CVE-2012-0710: Input Validation

Published Mar 20, 2012
·
Updated

IBM DB2 9.1 before FP11, 9.5 before FP9, 9.7 before FP5, and 9.8 before FP4 allows remote attackers to cause a denial of service (daemon crash) via a crafted Distributed Relational Database Architecture (DRDA) request.

Affected Software

38 affected components
IBM DB2=9.1
IBM DB2=9.1-fp1
IBM DB2=9.1-fp10
IBM DB2=9.1-fp2
IBM DB2=9.1-fp2a
IBM DB2=9.1-fp3
IBM DB2=9.1-fp3a
IBM DB2=9.1-fp4
IBM DB2=9.1-fp4a
IBM DB2=9.1-fp5
IBM DB2=9.1-fp6
IBM DB2=9.1-fp6a
IBM DB2=9.1-fp7
IBM DB2=9.1-fp7a
IBM DB2=9.1-fp8
IBM DB2=9.1-fp9
IBM DB2=9.5
IBM DB2=9.5-fp1
IBM DB2=9.5-fp2
IBM DB2=9.5-fp2a
IBM DB2=9.5-fp3
IBM DB2=9.5-fp3a
IBM DB2=9.5-fp3b
IBM DB2=9.5-fp4
IBM DB2=9.5-fp4a
IBM DB2=9.5-fp5
IBM DB2=9.5-fp6
IBM DB2=9.5-fp6a
IBM DB2=9.5-fp7
IBM DB2=9.5-fp8
IBM DB2=9.7
IBM DB2=9.7-fp1
IBM DB2=9.7-fp2
IBM DB2=9.7-fp3
IBM DB2=9.7-fp3a
IBM DB2=9.7-fp4
IBM DB2=9.8
IBM DB2=9.8-fp3

Event History

Mar 20, 2012
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description

Frequently Asked Questions

1

What is the severity of CVE-2012-0710?

CVE-2012-0710 has been classified with a severity that allows remote attackers to cause a denial of service via crafted DRDA requests.

2

How do I fix CVE-2012-0710?

To fix CVE-2012-0710, you should upgrade IBM DB2 to a version that is patched, specifically versions 9.1 FP11 and later, 9.5 FP9 and later, 9.7 FP5 and later, or 9.8 FP4 and later.

3

What versions of IBM DB2 are affected by CVE-2012-0710?

CVE-2012-0710 affects IBM DB2 versions 9.1 before FP11, 9.5 before FP9, 9.7 before FP5, and 9.8 before FP4.

4

Can CVE-2012-0710 be exploited remotely?

Yes, CVE-2012-0710 can be exploited remotely by sending crafted DRDA requests that lead to a denial of service.

5

What are the potential impacts of CVE-2012-0710?

The potential impacts of CVE-2012-0710 include application downtime and service disruptions due to the DB2 daemon crashing.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203