CVE - CVE-2014-3095

CVE-ID
CVE-2014-3095	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
The SQL engine in IBM DB2 9.5 through FP10, 9.7 through FP9a, 9.8 through FP5, 10.1 through FP4, and 10.5 before FP4 on Linux, UNIX, and Windows allows remote authenticated users to cause a denial of service (daemon crash) via a crafted UNION clause in a subquery of a SELECT statement.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
AIXAPAR:IT02433 URL:http://www-01.ibm.com/support/docview.wss?uid=swg1IT02433 AIXAPAR:IT02643 URL:http://www-01.ibm.com/support/docview.wss?uid=swg1IT02643 AIXAPAR:IT02644 URL:http://www-01.ibm.com/support/docview.wss?uid=swg1IT02644 AIXAPAR:IT02645 URL:http://www-01.ibm.com/support/docview.wss?uid=swg1IT02645 AIXAPAR:IT02646 URL:http://www-01.ibm.com/support/docview.wss?uid=swg1IT02646 BID:69546 URL:http://www.securityfocus.com/bid/69546 CONFIRM:http://www-01.ibm.com/support/docview.wss?uid=swg21681623 CONFIRM:http://www-01.ibm.com/support/docview.wss?uid=swg21683297 SECUNIA:58725 URL:http://secunia.com/advisories/58725 SECUNIA:60845 URL:http://secunia.com/advisories/60845 XF:ibm-db2-cve20143095-dos(94263) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/94263
Assigning CNA
IBM Corporation
Date Record Created
20140429	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20140429)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)