CVE-2016-0211: Input Validation

Published Apr 28, 2016

Updated

IBM DB2 9.7 through FP11, 9.8, 10.1 through FP5, and 10.5 through FP7 on Linux, UNIX, and Windows allows remote authenticated users to cause a denial of service (daemon crash) via a crafted DRDA message.

Affected Software

288 affected components

IBM DB2=9.8

IBM DB2=9.8.0.1

IBM DB2=9.8.0.2

IBM DB2=9.8.0.3

IBM DB2=9.8.0.4

IBM DB2=9.8.0.5

IBM DB2 Connect=9.8

IBM DB2 Connect=9.8.0.1

IBM DB2 Connect=9.8.0.2

IBM DB2 Connect=9.8.0.3

IBM DB2 Connect=9.8.0.4

IBM DB2 Connect=9.8.0.5

IBM DB2=10.5

IBM DB2=10.5.0.1

IBM DB2=10.5.0.2

IBM DB2=10.5.0.3

IBM DB2=10.5.0.4

IBM DB2=10.5.0.5

IBM DB2=10.5.0.6

IBM DB2=10.5.0.7

IBM DB2 Connect=10.5

IBM DB2 Connect=10.5.0.1

IBM DB2 Connect=10.5.0.2

IBM DB2 Connect=10.5.0.3

IBM DB2 Connect=10.5.0.4

IBM DB2 Connect=10.5.0.5

IBM DB2 Connect=10.5.0.6

IBM DB2 Connect=10.5.0.7

IBM DB2=10.1

IBM DB2=10.1.0.1

IBM DB2=10.1.0.2

IBM DB2=10.1.0.3

IBM DB2=10.1.0.4

IBM DB2=10.1.0.5

IBM DB2 Connect=10.1

IBM DB2 Connect=10.1.0.1

IBM DB2 Connect=10.1.0.2

IBM DB2 Connect=10.1.0.3

IBM DB2 Connect=10.1.0.4

IBM DB2 Connect=10.1.0.5

IBM DB2=9.7

IBM DB2=9.7.0.1

IBM DB2=9.7.0.2

IBM DB2=9.7.0.3

IBM DB2=9.7.0.4

IBM DB2=9.7.0.5

IBM DB2=9.7.0.6

IBM DB2=9.7.0.7

IBM DB2=9.7.0.8

IBM DB2=9.7.0.9

IBM DB2=9.7.0.10

IBM DB2=9.7.0.11

IBM DB2 Connect=9.7

IBM DB2 Connect=9.7.0.1

IBM DB2 Connect=9.7.0.2

IBM DB2 Connect=9.7.0.3

IBM DB2 Connect=9.7.0.4

IBM DB2 Connect=9.7.0.5

IBM DB2 Connect=9.7.0.6

IBM DB2 Connect=9.7.0.7

IBM DB2 Connect=9.7.0.8

IBM DB2 Connect=9.7.0.9

IBM DB2 Connect=9.7.0.10

IBM DB2 Connect=9.7.0.11

Event History

Apr 28, 2016

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-0211?

CVE-2016-0211 has a severity rating that indicates it can lead to a denial of service due to a daemon crash.

How do I fix CVE-2016-0211?

To mitigate CVE-2016-0211, apply the latest patches or updates provided by IBM for affected versions of IBM DB2.

Which versions of IBM DB2 are affected by CVE-2016-0211?

CVE-2016-0211 affects IBM DB2 versions 9.7 through FP11, 9.8, 10.1 through FP5, and 10.5 through FP7.

What type of attack is facilitated by CVE-2016-0211?

CVE-2016-0211 allows remote authenticated users to exploit a vulnerability via a crafted DRDA message, resulting in service disruption.

Who should be concerned about CVE-2016-0211?

Organizations using affected versions of IBM DB2 should be concerned and take immediate action to address this vulnerability.