CVE-2009-0172 : Unspecified vulnerability in IBM DB2 8 before FP17a, 9.1 before FP6a, and 9.5 be

Unspecified vulnerability in IBM DB2 8 before FP17a, 9.1 before FP6a, and 9.5 before FP3a allows remote attackers to cause a denial of service (infinite loop) via a crafted CONNECT data stream.

Published 2009-01-16 21:30:04

Updated 2017-08-08 01:33:49

Source MITRE

View at NVD, CVE.org

Vulnerability category: Input validationDenial of service

Products affected by CVE-2009-0172

IBM » Db2 Universal Database » Version: 9.1 Update GA
cpe:2.3:a:ibm:db2_universal_database:9.1:ga:*:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Version: 9.5
cpe:2.3:a:ibm:db2_universal_database:9.5:*:*:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Version: 9.1 Update FP2 Windows Edition
cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:windows:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Version: 9.1 Update FP3 AIX Edition
cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:aix:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Version: 9.1 Update FP4 Linux Edition
cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:linux:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Version: 9.1 Update FP4 Windows Edition
cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:windows:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Version: 9.1 AIX Edition
cpe:2.3:a:ibm:db2_universal_database:9.1:*:aix:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Version: 9.1 Linux Edition
cpe:2.3:a:ibm:db2_universal_database:9.1:*:linux:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Version: 9.1 Hp-ux Edition
cpe:2.3:a:ibm:db2_universal_database:9.1:*:hp-ux:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Version: 9.1 Update FP2 Linux Edition
cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:linux:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Version: 9.1 Update FP2 Solaris Edition
cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:solaris:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Version: 9.1 Update FP4 AIX Edition
cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:aix:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Version: 9.1 Update FP4 Hp-ux Edition
cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:hp-ux:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Version: 9.5 AIX Edition
cpe:2.3:a:ibm:db2_universal_database:9.5:*:aix:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Version: 9.5 Solaris Edition
cpe:2.3:a:ibm:db2_universal_database:9.5:*:solaris:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Version: 9.5 Windows Edition
cpe:2.3:a:ibm:db2_universal_database:9.5:*:windows:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Version: 9.1 Update FP3 Hp-ux Edition
cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:hp-ux:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Version: 9.1 Solaris Edition
cpe:2.3:a:ibm:db2_universal_database:9.1:*:solaris:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Version: 9.1 Windows Edition
cpe:2.3:a:ibm:db2_universal_database:9.1:*:windows:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Version: 9.1 Update FP2 AIX Edition
cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:aix:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Version: 9.1 Update FP2 Hp-ux Edition
cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:hp-ux:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Version: 9.1 Update FP3 Solaris Edition
cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:solaris:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Version: 9.5 Hp-ux Edition
cpe:2.3:a:ibm:db2_universal_database:9.5:*:hp-ux:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Version: 9.5 Linux Edition
cpe:2.3:a:ibm:db2_universal_database:9.5:*:linux:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Version: 9.1 Update Fp4a Windows Edition
cpe:2.3:a:ibm:db2_universal_database:9.1:fp4a:windows:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Version: 9.1 Update Fp4a Hp-ux Edition
cpe:2.3:a:ibm:db2_universal_database:9.1:fp4a:hp-ux:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Version: 9.1 Update Fp4a Linux Edition
cpe:2.3:a:ibm:db2_universal_database:9.1:fp4a:linux:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Version: 9.1 Update FP2
cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:*:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Version: 9.1 Update FP4
cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:*:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Version: 9.5 Update FP1 AIX Edition
cpe:2.3:a:ibm:db2_universal_database:9.5:fp1:aix:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Version: 9.5 Update FP1 Linux Edition
cpe:2.3:a:ibm:db2_universal_database:9.5:fp1:linux:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Version: 9.1 Update Fp4a
cpe:2.3:a:ibm:db2_universal_database:9.1:fp4a:*:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Version: 9.5 Update FP1 Windows Edition
cpe:2.3:a:ibm:db2_universal_database:9.5:fp1:windows:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Version: 9.5 Update FP1 Solaris Edition
cpe:2.3:a:ibm:db2_universal_database:9.5:fp1:solaris:*:*:*:*:*
Matching versions
IBM » Db2 Universal Database » Version: 9.5 Update FP1 Hp-ux Edition
cpe:2.3:a:ibm:db2_universal_database:9.5:fp1:hp-ux:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2009-0172

EPSS FAQ

25.56%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 97 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2009-0172

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
5.0	MEDIUM	AV:N/AC:L/Au:N/C:N/I:N/A:P	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Partial

CWE ids for CVE-2009-0172

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2009-0172

Jump to

Vulnerability Details : CVE-2009-0172

Products affected by CVE-2009-0172

Exploit prediction scoring system (EPSS) score for CVE-2009-0172

CVSS scores for CVE-2009-0172

CWE ids for CVE-2009-0172

References for CVE-2009-0172