CVE-2013-5466: Medium severity ibm db2 universal database vulnerability

Published Dec 18, 2013

Updated

The XSLT library in IBM DB2 and DB2 Connect 9.5 through 10.5, and the DB2 pureScale Feature 9.8 for Enterprise Server Edition, allows remote authenticated users to cause a denial of service via unspecified vectors.

Affected Software

11 affected components

IBM DB2=9.5

IBM DB2=9.7

IBM DB2=9.8

IBM DB2=10.1

IBM DB2=10.5

IBM DB2 Connect=9.5

IBM DB2 Connect=9.7

IBM DB2 Connect=9.8

IBM DB2 Connect=10.1

IBM DB2 Connect=10.5

IBM Db2 Purescale Feature 9.8 Db2 Enterprise Edition

Event History

Dec 18, 2013

CVE Published

via MITRE·11:00 AM

Data Sourced

via MITRE·11:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2013-5466?

CVE-2013-5466 is a denial-of-service vulnerability affecting multiple versions of IBM DB2 and DB2 Connect.

How do I fix CVE-2013-5466?

To remediate CVE-2013-5466, update your IBM DB2 or DB2 Connect to the latest patched version provided by IBM.

Which versions are affected by CVE-2013-5466?

CVE-2013-5466 affects IBM DB2 versions 9.5 through 10.5 and IBM DB2 Connect versions 9.5 through 10.5.

Can CVE-2013-5466 be exploited without authentication?

No, CVE-2013-5466 requires the attacker to be a remote authenticated user to exploit the vulnerability.

What impact does CVE-2013-5466 have on systems?

Exploitation of CVE-2013-5466 can lead to significant service disruptions, impacting the availability of the affected DB2 systems.