CVE-2014-6159: Input Validation
Published Nov 8, 2014
·Updated
IBM DB2 9.7 before FP10, 9.8 through FP5, 10.1 through FT4, and 10.5 through FP4 on Linux, UNIX, and Windows, when immediate AUTOREVAL is enabled, allows remote authenticated users to cause a denial of service (daemon crash) via a crafted ALTER TABLE statement.
Affected Software
4 affected components
IBM DB2=9.7
IBM DB2=9.8
IBM DB2=10.1
IBM DB2=10.5
Event History
Nov 8, 2014
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-6159?
CVE-2014-6159 has a medium severity rating due to its potential for denial of service.
2
How do I fix CVE-2014-6159?
To fix CVE-2014-6159, update IBM DB2 to the latest version or apply the appropriate fix pack.
3
Who is affected by CVE-2014-6159?
Users of IBM DB2 versions 9.7 before FP10, 9.8 through FP5, 10.1 through FT4, and 10.5 through FP4 are affected.
4
What type of attack does CVE-2014-6159 enable?
CVE-2014-6159 enables a denial of service attack resulting from a crafted ALTER TABLE statement.
5
Can CVE-2014-6159 be exploited remotely?
Yes, CVE-2014-6159 can be exploited by remote authenticated users.