CVE Vulnerabilities

CVE-2006-6638

Published: Dec 19, 2006 | Modified: Sep 05, 2008
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu

IBM DB2 8.1 before FixPak 14 allows remote attackers to cause a denial of service via a crafted SQLJRA packet, which causes a NULL pointer dereference in the sqle_db2ra_as_recvrequest function in DB2ENGN.DLL, a different issue than CVE-2006-4257.

Affected Software

Name Vendor Start Version End Version
Db2_universal_database Ibm 8.1 (including) 8.1 (including)
Db2_universal_database Ibm 8.1.4 (including) 8.1.4 (including)
Db2_universal_database Ibm 8.1.5 (including) 8.1.5 (including)
Db2_universal_database Ibm 8.1.6 (including) 8.1.6 (including)
Db2_universal_database Ibm 8.1.6c (including) 8.1.6c (including)
Db2_universal_database Ibm 8.1.7 (including) 8.1.7 (including)
Db2_universal_database Ibm 8.1.7b (including) 8.1.7b (including)
Db2_universal_database Ibm 8.1.8 (including) 8.1.8 (including)
Db2_universal_database Ibm 8.1.8a (including) 8.1.8a (including)
Db2_universal_database Ibm 8.1.9 (including) 8.1.9 (including)
Db2_universal_database Ibm 8.1.9a (including) 8.1.9a (including)
Db2_universal_database Ibm 8.10 (including) 8.10 (including)
Db2_universal_database Ibm 8.12 (including) 8.12 (including)

References