IBM Db2 Universal Database vulnerabilities, page 4

66 vulnerabilities

Known vulnerabilities in IBM Db2 Universal Database, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5CVE-2009-0173ibmdb2_universal_database
EPSS score
3.01%
Unspecified vulnerability in the server in IBM DB2 8 before FP17a, 9.1 before FP6a, and 9.5 before FP3a allows remote authenticated users to cause a denial of service (trap) via a crafted data stream.4.6CVE-2009-4150ibmdb2+1
EPSS score
0.44%
dasauto in IBM DB2 8 before FP18, 9.1 before FP8, 9.5 before FP4, and 9.7 before FP1 permits execution by unprivileged user accounts, which has unspecified impact and local attack vectors.5CVE-2006-6638ibmdb2_universal_database
EPSS score
2.31%
IBM DB2 8.1 before FixPak 14 allows remote attackers to cause a denial of service via a crafted SQLJRA packet, which causes a NULL pointer dereference in the sqle_db2ra_as_recvrequest function in DB2ENGN.DLL, a different issue than CVE-2006-4257.5CVE-2006-3068ibmdb2_universal_database
EPSS score
1.60%
IBM DB2 Universal Database (UDB) before 8.2 FixPak 12 allows remote attackers to cause a denial of service (application crash) by sending "incorrect information ... regarding the package name/creator," which leads to a "memory overwrite."5CVE-2006-3066ibmdb2_universal_database
EPSS score
1.97%
Buffer overflow in the TCP/IP listener in IBM DB2 Universal Database (UDB) before 8.1 FixPak 12 allows remote attackers to cause a denial of service (application crash) via a long MGRLVLLS message inside of an EXCSAT message when establishing a connection.5CVE-2006-3067ibmdb2_universal_database
EPSS score
2.49%
Multiple unspecified vulnerabilities in IBM DB2 Universal Database (UDB) before 8.1 FixPak 12 allow remote attackers to cause a denial of service (application crash) via a (1) "long column list" in the (a) REPLACE INTO and (b) INSERT INTO portions of the LOAD command or a (2) large number of values in an IN clause, possibly related to a buffer overflow.