cbcvebase.
CVE-2006-6638
published 2006-12-19

CVE-2006-6638: IBM DB2 8.1 before FixPak 14 allows remote attackers to cause a denial of service via a crafted SQLJRA packet, which causes a NULL pointer dereference in the…

PriorityP417medium5CVSS 2.0
AVNACLAuNCNINAP
EPSS
2.17%
80.2th percentile
IBM DB2 8.1 before FixPak 14 allows remote attackers to cause a denial of service via a crafted SQLJRA packet, which causes a NULL pointer dereference in the sqle_db2ra_as_recvrequest function in DB2ENGN.DLL, a different issue than CVE-2006-4257.

Affected

13 ranges
VendorProductVersion rangeFixed in
ibmdb2_universal_database——
ibmdb2_universal_database——
ibmdb2_universal_database——
ibmdb2_universal_database——
ibmdb2_universal_database——
ibmdb2_universal_database——
ibmdb2_universal_database——
ibmdb2_universal_database——
ibmdb2_universal_database——
ibmdb2_universal_database——
ibmdb2_universal_database——
ibmdb2_universal_database——
ibmdb2_universal_database——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.