First published: Thu Jun 24 2021(Updated: )
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5, under specific circumstance of a table being dropped while being accessed in another session, could allow an authenticated user to cause a denial of srevice IBM X-Force ID: 203031.
Credit: psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
Ibm Db2 | =9.7 | |
Ibm Db2 | =10.1 | |
Ibm Db2 | =10.5 | |
Ibm Db2 | =11.1 | |
Ibm Db2 | =11.5 | |
HP HP-UX | ||
IBM AIX | ||
Linux Linux kernel | ||
Microsoft Windows | ||
Oracle Solaris |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID is CVE-2021-29777.
The severity of CVE-2021-29777 is medium, with a severity value of 6.5.
IBM Db2 for Linux, UNIX and Windows versions 9.7, 10.1, 10.5, 11.1, and 11.5 are affected.
An authenticated user can cause a denial of service by dropping a table while it is being accessed in another session.
No, other operating systems such as HP-UX, IBM AIX, Linux kernel, Microsoft Windows, and Oracle Solaris are not vulnerable.
You can find more information about CVE-2021-29777 at the following references: [Link 1](https://exchange.xforce.ibmcloud.com/vulnerabilities/203031), [Link 2](https://security.netapp.com/advisory/ntap-20210720-0006/), [Link 3](https://www.ibm.com/support/pages/node/6466373).