CVE-2009-2858 — Uncontrolled Resource Consumption in IBM DB2

CWE-399CWE-400 — Uncontrolled Resource ConsumptionCWE-772 — Missing Release of Resource after Effective Lifetime6 documents5 sources
Severity
5.0MEDIUMNVD
EPSS
0.4%
top 41.08%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM DB2
Timeline
PublishedAug 19
Latest updateMay 3

Description

Memory leak in the Security component in IBM DB2 8.1 before FP18 on Unix platforms allows attackers to cause a denial of service (memory consumption) via unspecified vectors, related to private memory within the DB2 memory structure.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDibm/db28.1+1

Patches

Patch: www-01.ibm.com ↗Patch: www-01.ibm.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-h6wg-r7g4-rfmh: Memory leak in the Security component in IBM DB2 8↗2022-05-03
▶
CVEList
CVE-2009-2858: Memory leak in the Security component in IBM DB2 8↗2009-08-19
▶

💥Exploits & PoCs

1
Exploit-DB
Moa Gallery 1.1.0 - 'gallery_id' SQL Injection↗2009-08-24
▶

📐Framework References

2
CWE
Uncontrolled Resource Consumption↗
▶
CWE
Missing Release of Resource after Effective Lifetime↗
▶
CVE-2009-2858 — Uncontrolled Resource Consumption | cvebase