CVE-2012-2180 — IBM DB2 vulnerability

3 documents3 sources
Severity
4.3MEDIUMNVD
EPSS
1.0%
top 22.96%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM DB2
Timeline
PublishedJun 20
Latest updateMay 14

Description

The chaining functionality in the Distributed Relational Database Architecture (DRDA) module in IBM DB2 9.7 before FP6 and 9.8 before FP5 allows remote attackers to cause a denial of service (NULL pointer dereference, and resource consumption or daemon crash) via a crafted request.

CVSS vector

AV:N/AC:M/C:N/I:N/A:PExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

â–¶NVDibm/db29 versions+8

🔴Vulnerability Details

2
GHSA
GHSA-mj78-gf29-j6xp: The chaining functionality in the Distributed Relational Database Architecture (DRDA) module in IBM DB2 9↗2022-05-14
â–¶
CVEList
CVE-2012-2180: The chaining functionality in the Distributed Relational Database Architecture (DRDA) module in IBM DB2 9↗2012-06-20
â–¶
CVE-2012-2180 — IBM DB2 vulnerability | cvebase