CVE-2009-2858 : Memory leak in the Security component in IBM DB2 8.1 before FP18 on Unix platfor

Memory leak in the Security component in IBM DB2 8.1 before FP18 on Unix platforms allows attackers to cause a denial of service (memory consumption) via unspecified vectors, related to private memory within the DB2 memory structure.

Published 2009-08-19 17:30:01

Updated 2025-04-09 00:30:58

Source MITRE

View at NVD, CVE.org

Vulnerability category: Denial of service

Products affected by CVE-2009-2858

IBM » DB2 » Update Fp17
Versions up to, including, (<=) 8.1
cpe:2.3:a:ibm:db2:*:fp17:*:*:*:*:*:*
Matching versions
IBM » DB2 » Version: 8.1 Update Fp13
cpe:2.3:a:ibm:db2:8.1:fp13:*:*:*:*:*:*
Matching versions
IBM » DB2 » Version: 8.1 Update Fp14
cpe:2.3:a:ibm:db2:8.1:fp14:*:*:*:*:*:*
Matching versions
IBM » DB2 » Version: 8.1 Update FP3
cpe:2.3:a:ibm:db2:8.1:fp3:*:*:*:*:*:*
Matching versions
IBM » DB2 » Version: 8.1 Update FP4
cpe:2.3:a:ibm:db2:8.1:fp4:*:*:*:*:*:*
Matching versions
IBM » DB2 » Version: 8.1 Update Fp11
cpe:2.3:a:ibm:db2:8.1:fp11:*:*:*:*:*:*
Matching versions
IBM » DB2 » Version: 8.1 Update Fp12
cpe:2.3:a:ibm:db2:8.1:fp12:*:*:*:*:*:*
Matching versions
IBM » DB2 » Version: 8.1 Update FP7
cpe:2.3:a:ibm:db2:8.1:fp7:*:*:*:*:*:*
Matching versions
IBM » DB2 » Version: 8.1 Update FP8
cpe:2.3:a:ibm:db2:8.1:fp8:*:*:*:*:*:*
Matching versions
IBM » DB2 » Version: 8.1 Update FP5
cpe:2.3:a:ibm:db2:8.1:fp5:*:*:*:*:*:*
Matching versions
IBM » DB2 » Version: 8.1 Update FP6
cpe:2.3:a:ibm:db2:8.1:fp6:*:*:*:*:*:*
Matching versions
IBM » DB2 » Version: 8.1 Update FP1
cpe:2.3:a:ibm:db2:8.1:fp1:*:*:*:*:*:*
Matching versions
IBM » DB2 » Version: 8.1 Update FP2
cpe:2.3:a:ibm:db2:8.1:fp2:*:*:*:*:*:*
Matching versions
IBM » DB2 » Version: 8.1 Update FP9
cpe:2.3:a:ibm:db2:8.1:fp9:*:*:*:*:*:*
Matching versions
IBM » DB2 » Version: 8.1 Update Fp10
cpe:2.3:a:ibm:db2:8.1:fp10:*:*:*:*:*:*
Matching versions
IBM » DB2 » Version: 8.1 Update Fp9a
cpe:2.3:a:ibm:db2:8.1:fp9a:*:*:*:*:*:*
Matching versions
IBM » DB2 » Version: 8.1 Update Fp8a
cpe:2.3:a:ibm:db2:8.1:fp8a:*:*:*:*:*:*
Matching versions
IBM » DB2 » Version: 8.1 Update Fp4a
cpe:2.3:a:ibm:db2:8.1:fp4a:*:*:*:*:*:*
Matching versions
IBM » DB2 » Version: 8.1 Update Fp15
cpe:2.3:a:ibm:db2:8.1:fp15:*:*:*:*:*:*
Matching versions
IBM » DB2 » Version: 8.1 Update Fp7a
cpe:2.3:a:ibm:db2:8.1:fp7a:*:*:*:*:*:*
Matching versions
IBM » DB2 » Version: 8.1 Update Fp6a
cpe:2.3:a:ibm:db2:8.1:fp6a:*:*:*:*:*:*
Matching versions
IBM » DB2 » Version: 8.1 Update Fp6b
cpe:2.3:a:ibm:db2:8.1:fp6b:*:*:*:*:*:*
Matching versions
IBM » DB2 » Version: 8.1 Update Fp6c
cpe:2.3:a:ibm:db2:8.1:fp6c:*:*:*:*:*:*
Matching versions
IBM » DB2 » Version: 8.1 Update Fp17a
cpe:2.3:a:ibm:db2:8.1:fp17a:*:*:*:*:*:*
Matching versions

Threat overview for CVE-2009-2858

Top countries where our scanners detected CVE-2009-2858

Top open port discovered on systems with this issue 50000

IPs affected by CVE-2009-2858 5

Threat actors abusing to this issue? Yes

Find out if you^* are affected by CVE-2009-2858!

^*Directly or indirectly through your vendors, service providers and 3rd parties. Powered by attack surface intelligence from SecurityScorecard.

Exploit prediction scoring system (EPSS) score for CVE-2009-2858

EPSS FAQ

0.37%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 56 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2009-2858

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
5.0	MEDIUM	AV:N/AC:L/Au:N/C:N/I:N/A:P	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Partial

CWE ids for CVE-2009-2858

CWE-399

Assigned by: nvd@nist.gov (Primary)

References for CVE-2009-2858