← back
CVE-2009-0172

CVE-2009-0172

EPSS 8.5%
Unspecified vulnerability in IBM DB2 8 before FP17a, 9.1 before FP6a, and 9.5 before FP3a allows remote attackers to cause a denial of service (infinite loop) via a crafted CONNECT data stream.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/8344unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXTftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v91/APARLIST.TXTftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXThttp://secunia.com/advisories/33529http://securitytracker.com/id?1021591https://exchange.xforce.ibmcloud.com/vulnerabilities/47931http://www-01.ibm.com/support/docview.wss?uid=swg1IZ37696http://www-01.ibm.com/support/docview.wss?uid=swg21363936http://www-1.ibm.com/support/docview.wss?uid=swg1IZ36534http://www-1.ibm.com/support/docview.wss?uid=swg1IZ37697http://www.securityfocus.com/bid/33258http://www.vupen.com/english/advisories/2009/0137