The chaining functionality in the Distributed Relational Database Architecture (DRDA) module in IBM DB2 9.7 before FP6 and 9.8 before FP5 allows remote attackers to cause a denial of service (NULL pointer dereference, and resource consumption or daemon crash) via a crafted request.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Db2 | Ibm | 9.7 (including) | 9.7 (including) |
| Db2 | Ibm | 9.7.0.1 (including) | 9.7.0.1 (including) |
| Db2 | Ibm | 9.7.0.2 (including) | 9.7.0.2 (including) |
| Db2 | Ibm | 9.7.0.3 (including) | 9.7.0.3 (including) |
| Db2 | Ibm | 9.7.0.4 (including) | 9.7.0.4 (including) |
| Db2 | Ibm | 9.7.0.5 (including) | 9.7.0.5 (including) |
| Db2exc | Ubuntu | hardy | * |
| Db2exc | Ubuntu | lucid | * |
| Db2exc | Ubuntu | precise | * |
| Db2exc | Ubuntu | upstream | * |
| Db2exc-amd64 | Ubuntu | hardy | * |
| Db2exc-amd64 | Ubuntu | lucid | * |
| Db2exc-amd64 | Ubuntu | precise | * |
| Db2exc-amd64 | Ubuntu | upstream | * |