CVE-2019-4101
01.07.2019, 15:15
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.1, 10.5, and 11.1 is vulnerable to a denial of service. Users that have both EXECUTE on PD_GET_DIAG_HIST and access to the diagnostic directory on the DB2 server can cause the instance to crash. IBM X-Force ID: 158091.Enginsight
| Vendor | Product | Version |
|---|---|---|
| ibm | db2 | 9.7.0.0 |
| ibm | db2 | 9.7.0.1 |
| ibm | db2 | 9.7.0.2 |
| ibm | db2 | 9.7.0.3 |
| ibm | db2 | 9.7.0.4 |
| ibm | db2 | 9.7.0.5 |
| ibm | db2 | 9.7.0.6 |
| ibm | db2 | 9.7.0.7 |
| ibm | db2 | 9.7.0.8 |
| ibm | db2 | 9.7.0.9 |
| ibm | db2 | 9.7.0.10 |
| ibm | db2 | 9.7.0.11 |
| ibm | db2 | 10.1.0.0 |
| ibm | db2 | 10.1.0.1 |
| ibm | db2 | 10.1.0.2 |
| ibm | db2 | 10.1.0.3 |
| ibm | db2 | 10.1.0.4 |
| ibm | db2 | 10.1.0.5 |
| ibm | db2 | 10.1.0.6 |
| ibm | db2 | 10.5.0.0 |
| ibm | db2 | 10.5.0.1 |
| ibm | db2 | 10.5.0.2 |
| ibm | db2 | 10.5.0.3 |
| ibm | db2 | 10.5.0.4 |
| ibm | db2 | 10.5.0.5 |
| ibm | db2 | 10.5.0.6 |
| ibm | db2 | 10.5.0.7 |
| ibm | db2 | 10.5.0.8 |
| ibm | db2 | 10.5.0.9 |
| ibm | db2 | 10.5.0.10 |
| ibm | db2 | 11.1.0.0 |
| ibm | db2 | 11.1.1.1 |
| ibm | db2 | 11.1.2.2 |
| ibm | db2 | 11.1.3.3 |
| ibm | db2 | 11.1.4.4 |
𝑥
= Vulnerable software versions
References