Multiple IBM DB2 product Denial of Service Vulnerability (CVE-2015-0157)

Multiple IBM DB2 product Denial of Service Vulnerability (CVE-2015-0157)
Multiple IBM DB2 product Denial of Service Vulnerability (CVE-2015-0157)

Release date:
Updated on:

Affected Systems:

IBM DB2 9.8-FP5
IBM DB2 9.7-FP10
IBM DB2 10.5-FP5
IBM DB2 10.1-FP5

Description:

Bugtraq id: 75947
CVE (CAN) ID: CVE-2015-0157

IBM DB2 is a large commercial relational database system.

On Linux, UNIX, and Windows platforms, IBM DB2 9.7-FP10, 9.8-FP5, 10.1-FP5, and 10.5-FP5 have denial of service vulnerabilities, authenticated remote users use scalar functions not specified in SQL statements to cause DoS attacks.

<* Source: vendor
*>

Suggestion:

Vendor patch:

IBM
---
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:


Http://www-01.ibm.com/support/docview.wss? Uid = swg1IT07108
Http://www-01.ibm.com/support/docview.wss? Uid = swg1IT07107
Http://www-01.ibm.com/support/docview.wss? Uid = swg21697987
Http://www-01.ibm.com/support/docview.wss? Uid = swg1IT07109
Http://www-01.ibm.com/support/docview.wss? Uid = swg1IT07103

This article permanently updates the link address: