Remote Denial of Service Vulnerability (CVE-2014-6159) for multiple IBM DB2 Products)

Remote Denial of Service Vulnerability (CVE-2014-6159) for multiple IBM DB2 Products)

Release date:
Updated on:

Affected Systems:
IBM DB2 9.x
IBM DB2 10.x
Description:
Bugtraq id: 71006
CVE (CAN) ID: CVE-2014-6159

IBM DB2 is a large commercial relational database system.

After AUTO_REVAL is enabled for IBM DB2 9.7-FP10, 9.8-FP5, and 10.5-FP4 (Linux, UNIX, and Windows), a remote denial of service vulnerability exists, authenticated attackers exploit this vulnerability by constructing an alter table statement to crash affected applications.

<* Source: IBM (ncsupp@ca.ibm.com)
*>

Suggestion:
Vendor patch:

IBM
---
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www-01.ibm.com/support/docview.wss? Uid = swg21688051

This article permanently updates the link address: