CVE-2012-2180: Null Pointer Dereference
The chaining functionality in the Distributed Relational Database Architecture (DRDA) module in IBM DB2 9.7 before FP6 and 9.8 before FP5 allows remote attackers to cause a denial of service (NULL pointer dereference, and resource consumption or daemon crash) via a crafted request.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-2180?
The severity of CVE-2012-2180 is classified as high due to its potential to cause denial of service.
How do I fix CVE-2012-2180?
To fix CVE-2012-2180, update IBM Db2 to version 9.7 FP6 or 9.8 FP5.
What versions of IBM Db2 are affected by CVE-2012-2180?
CVE-2012-2180 affects IBM Db2 versions 9.7 prior to FP6 and 9.8 prior to FP5.
What are the consequences of the vulnerability CVE-2012-2180?
The consequences of CVE-2012-2180 include a denial of service condition, which can result in application crashes and resource consumption.
Is remote access needed to exploit CVE-2012-2180?
Yes, CVE-2012-2180 can be exploited remotely by sending crafted requests to the affected IBM Db2 instances.