CVE-2014-6209: Input Validation

Published Dec 12, 2014

Updated

IBM DB2 9.5 through FP10, 9.7 through FP10, 9.8 through FP5, 10.1 through FP4, and 10.5 before FP5 on Linux, UNIX, and Windows allows remote authenticated users to cause a denial of service (daemon crash) by specifying an identity column within a crafted ALTER TABLE statement.

Affected Software

4 affected components

IBM DB2=9.5

IBM DB2=9.7

IBM DB2=10.1

IBM DB2=10.5

Event History

Dec 12, 2014

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2014-6209?

CVE-2014-6209 has a severity rating that indicates it can cause a denial of service condition.

How do I fix CVE-2014-6209?

To fix CVE-2014-6209, apply the latest fix pack updates to the affected IBM DB2 versions.

Who is affected by CVE-2014-6209?

CVE-2014-6209 affects remote authenticated users of IBM DB2 versions 9.5, 9.7, 10.1, and 10.5 on Linux, UNIX, and Windows.

What type of vulnerability is CVE-2014-6209?

CVE-2014-6209 is a denial of service vulnerability that allows a crash of the daemon.

What is the attack vector for CVE-2014-6209?

The attack vector for CVE-2014-6209 involves sending a crafted ALTER TABLE statement specifying an identity column.