CVE-2015-1935: High severity ibm db2 universal database vulnerability
The scalar-function implementation in IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX, and Windows allows remote attackers to cause a denial of service or execute arbitrary code via unspecified vectors.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2015-1935?
CVE-2015-1935 is classified as a critical vulnerability that can lead to remote denial of service or arbitrary code execution.
How do I fix CVE-2015-1935?
To fix CVE-2015-1935, you should update IBM DB2 to the latest supported version or apply the relevant patches provided by IBM.
Which versions of IBM DB2 are affected by CVE-2015-1935?
CVE-2015-1935 affects IBM DB2 versions 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5.
What types of attacks can exploit CVE-2015-1935?
CVE-2015-1935 can be exploited to cause denial of service or execute arbitrary code by remote attackers.
Are there any workarounds for CVE-2015-1935?
There are no publicly documented workarounds for CVE-2015-1935, and the best approach is to apply patches or updates.