CVE-2012-0712: Medium severity ibm db2 universal database vulnerability
Published Mar 20, 2012
·Updated
The XML feature in IBM DB2 9.5 before FP9, 9.7 through FP5, and 9.8 through FP4 allows remote authenticated users to cause a denial of service (infinite loop) by calling the XMLPARSE function with a crafted string expression.
Affected Software
24 affected components
IBM DB2=9.5
IBM DB2=9.5-fp1
IBM DB2=9.5-fp2
IBM DB2=9.5-fp2a
IBM DB2=9.5-fp3
IBM DB2=9.5-fp3a
IBM DB2=9.5-fp3b
IBM DB2=9.5-fp4
IBM DB2=9.5-fp4a
IBM DB2=9.5-fp5
IBM DB2=9.5-fp6
IBM DB2=9.5-fp6a
IBM DB2=9.5-fp7
IBM DB2=9.5-fp8
IBM DB2=9.7
IBM DB2=9.7-fp1
IBM DB2=9.7-fp2
IBM DB2=9.7-fp3
IBM DB2=9.7-fp3a
IBM DB2=9.7-fp4
IBM DB2=9.7-fp5
IBM DB2=9.8
IBM DB2=9.8-fp3
IBM DB2=9.8-fp4
Event History
Mar 20, 2012
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-0712?
CVE-2012-0712 has a high severity rating due to its potential to cause a denial of service.
2
How do I fix CVE-2012-0712?
To fix CVE-2012-0712, upgrade to IBM DB2 version 9.5 FP9, 9.7 FP6, or 9.8 FP5 or later.
3
Who is affected by CVE-2012-0712?
CVE-2012-0712 affects remote authenticated users using vulnerable versions of IBM DB2.
4
What happens if CVE-2012-0712 is exploited?
Exploitation of CVE-2012-0712 can result in an infinite loop, leading to a denial of service.
5
When was CVE-2012-0712 published?
CVE-2012-0712 was published in January 2012.