cbcvebase.
CVE-2008-3854
published 2008-08-28

CVE-2008-3854: Multiple stack-based buffer overflows in IBM DB2 9.1 before Fixpak 5 and 9.5 before Fixpak 1 allow remote attackers to cause a denial of service (system…

PriorityP336high7.8CVSS 2.0
AVNACLAuNCNINAC
EPSS
3.68%
88.4th percentile
Multiple stack-based buffer overflows in IBM DB2 9.1 before Fixpak 5 and 9.5 before Fixpak 1 allow remote attackers to cause a denial of service (system outage) via vectors related to (1) use of XQuery to issue statements; the (2) XMLQUERY, (3) XMLEXISTS, and (4) XMLTABLE statements; and the (5) sqlrlaka function.

Affected

2 ranges
VendorProductVersion rangeFixed in
ibmdb2_universal_database——
ibmdb2_universal_database——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.