CVE-2008-3853

CWE-119 — Buffer Overflow3 documents3 sources
Severity
9.3CRITICAL
EPSS
8.0%
top 7.92%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM DB2 Universal Database
Timeline
PublishedAug 28
Latest updateMay 3

Description

Buffer overflow in the DAS server program in the Core DAS function component in IBM DB2 9.1 before FP4a and 9.5 before FP1 allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via unspecified vectors. NOTE: this might be related to CVE-2007-3676.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages1 packages

Patches

Patch: www-1.ibm.com ↗Patch: www-1.ibm.com ↗Patch: www.securityfocus.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-xxpj-63fc-3w3g: Buffer overflow in the DAS server program in the Core DAS function component in IBM DB2 9↗2022-05-03
▶
CVEList
CVE-2008-3853: Buffer overflow in the DAS server program in the Core DAS function component in IBM DB2 9↗2008-08-28
▶
CVE-2008-3853 (CRITICAL CVSS 9.3) | Buffer overflow in the DAS server p | cvebase.io