| ID |
CVE-2010-3735
|
| Summary |
The "Query Compiler, Rewrite, Optimizer" component in IBM DB2 UDB 9.5 before FP6a allows remote authenticated users to cause a denial of service (CPU consumption) via a crafted query involving certain UNION ALL views, leading to an indefinitely large amount of compilation time. |
| References |
|
| Vulnerable Configurations |
-
cpe:2.3:a:ibm:db2:9.5:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.5:*:*:*:*:*:*:*
-
cpe:2.3:a:ibm:db2:9.5:fp1:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.5:fp1:*:*:*:*:*:*
-
cpe:2.3:a:ibm:db2:9.5:fp2:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.5:fp2:*:*:*:*:*:*
-
cpe:2.3:a:ibm:db2:9.5:fp2a:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.5:fp2a:*:*:*:*:*:*
-
cpe:2.3:a:ibm:db2:9.5:fp3:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.5:fp3:*:*:*:*:*:*
-
cpe:2.3:a:ibm:db2:9.5:fp3a:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.5:fp3a:*:*:*:*:*:*
-
cpe:2.3:a:ibm:db2:9.5:fp3b:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.5:fp3b:*:*:*:*:*:*
-
cpe:2.3:a:ibm:db2:9.5:fp4:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.5:fp4:*:*:*:*:*:*
-
cpe:2.3:a:ibm:db2:9.5:fp4a:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.5:fp4a:*:*:*:*:*:*
-
cpe:2.3:a:ibm:db2:9.5:fp5:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.5:fp5:*:*:*:*:*:*
|
| CVSS |
| Base: | 2.1 (as of 19-09-2017 - 01:31) |
| Impact: | |
| Exploitability: | |
|
| CWE |
CWE-399 |
| CAPEC |
|
| Access |
| Vector | Complexity | Authentication |
| NETWORK |
HIGH |
SINGLE |
|
| Impact |
| Confidentiality | Integrity | Availability |
| NONE |
NONE |
PARTIAL |
|
| cvss-vector
via4
|
AV:N/AC:H/Au:S/C:N/I:N/A:P
|
| oval
via4
|
| accepted | 2013-07-29T04:00:15.284-04:00 | | class | vulnerability | | contributors | | name | Aharon Chernin | | organization | DTCC |
| name | Maria Kedovskaya | | organization | ALTX-SOFT |
| | definition_extensions | | comment | IBM DB2 UDB is installed | | oval | oval:org.mitre.oval:def:12505 |
| | description | The "Query Compiler, Rewrite, Optimizer" component in IBM DB2 UDB 9.5 before FP6a allows remote authenticated users to cause a denial of service (CPU consumption) via a crafted query involving certain UNION ALL views, leading to an indefinitely large amount of compilation time. | | family | windows | | id | oval:org.mitre.oval:def:14736 | | status | accepted | | submitted | 2011-12-16T09:51:38.000-05:00 | | title | The "Query Compiler, Rewrite, Optimizer" component in IBM DB2 UDB 9.5 before FP6a allows remote authenticated users to cause a denial of service (CPU consumption) via a crafted query involving certain UNION ALL views, leading to an indefinitely large amount of compilation time. | | version | 7 |
|
| refmap
via4
|
| aixapar | IZ58417 | | confirm | ftp://public.dhe.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT |
|
| Last major update |
19-09-2017 - 01:31 |
| Published |
05-10-2010 - 18:00 |
| Last modified |
19-09-2017 - 01:31 |
