CVE-2009-2858

Memory leak in the Security component in IBM DB2 8.1 before FP18 on Unix platforms allows attackers to cause a denial of service (memory consumption) via unspecified vectors, related to private memory within the DB2 memory structure.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References

Link	Resource
ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT
http://secunia.com/advisories/36313	Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1IZ35635
http://www-01.ibm.com/support/docview.wss?uid=swg24024075	Patch

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:ibm:db2::fp17::::::*
	cpe:2.3:a:ibm:db2:8.1:fp1::::::
	cpe:2.3:a:ibm:db2:8.1:fp10::::::
	cpe:2.3:a:ibm:db2:8.1:fp11::::::
	cpe:2.3:a:ibm:db2:8.1:fp12::::::
	cpe:2.3:a:ibm:db2:8.1:fp13::::::
	cpe:2.3:a:ibm:db2:8.1:fp14::::::
	cpe:2.3:a:ibm:db2:8.1:fp15::::::
	cpe:2.3:a:ibm:db2:8.1:fp17a::::::
	cpe:2.3:a:ibm:db2:8.1:fp2::::::
	cpe:2.3:a:ibm:db2:8.1:fp3::::::
	cpe:2.3:a:ibm:db2:8.1:fp4::::::
	cpe:2.3:a:ibm:db2:8.1:fp4a::::::
	cpe:2.3:a:ibm:db2:8.1:fp5::::::
	cpe:2.3:a:ibm:db2:8.1:fp6::::::
	cpe:2.3:a:ibm:db2:8.1:fp6a::::::
	cpe:2.3:a:ibm:db2:8.1:fp6b::::::
	cpe:2.3:a:ibm:db2:8.1:fp6c::::::
	cpe:2.3:a:ibm:db2:8.1:fp7::::::
	cpe:2.3:a:ibm:db2:8.1:fp7a::::::
	cpe:2.3:a:ibm:db2:8.1:fp8::::::
	cpe:2.3:a:ibm:db2:8.1:fp8a::::::
	cpe:2.3:a:ibm:db2:8.1:fp9::::::
	cpe:2.3:a:ibm:db2:8.1:fp9a::::::

History

No history.

Information

Published : 2009-08-19 17:30

Updated : 2009-08-21 04:00

NVD link : CVE-2009-2858

Mitre link : CVE-2009-2858

CVE.ORG link : CVE-2009-2858

JSON object : View

Products Affected

ibm

db2

CWE

CWE-399

Resource Management Errors

{"id": "CVE-2009-2858", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2009-08-19T17:30:01.187", "references": [{"url": "ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/36313", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IZ35635", "source": "cve@mitre.org"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg24024075", "tags": ["Patch"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-399"}]}], "descriptions": [{"lang": "en", "value": "Memory leak in the Security component in IBM DB2 8.1 before FP18 on Unix platforms allows attackers to cause a denial of service (memory consumption) via unspecified vectors, related to private memory within the DB2 memory structure."}, {"lang": "es", "value": "Fuga de memoria en el componente de seguridad en IBM DB2 v8.1 anteriores a FP18 en plataformas Unix permite a atacantes producir una denegaci\u00f3n de servicio a trav\u00e9s de vectores sin especificar, relacionado con la memoria privada dentro de la estructura de memoria de DB2."}], "lastModified": "2009-08-21T04:00:00.000", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:db2:*:fp17:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "00D40BBF-DAC1-4C6D-806B-B04C88F237F7", "versionEndIncluding": "8.1"}, {"criteria": "cpe:2.3:a:ibm:db2:8.1:fp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2418C923-2F94-4FAF-A9BD-D1C436308C3D"}, {"criteria": "cpe:2.3:a:ibm:db2:8.1:fp10:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "18D59696-A477-4397-BC14-4EF69DAFA262"}, {"criteria": "cpe:2.3:a:ibm:db2:8.1:fp11:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BBABCAC8-0E04-44FC-BF1A-88CACB28E644"}, {"criteria": "cpe:2.3:a:ibm:db2:8.1:fp12:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AC318EEC-AFE5-4070-8711-B6560143CF9D"}, {"criteria": "cpe:2.3:a:ibm:db2:8.1:fp13:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5F02B3A6-F771-4F6A-A1E8-5E3EC1080272"}, {"criteria": "cpe:2.3:a:ibm:db2:8.1:fp14:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DCF379F0-6D58-47A9-849E-C48D13496C87"}, {"criteria": "cpe:2.3:a:ibm:db2:8.1:fp15:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1F878C22-6294-4DFD-AFA4-1094644D15F9"}, {"criteria": "cpe:2.3:a:ibm:db2:8.1:fp17a:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F2799A9D-1BAC-491A-B36B-A124C44D9EBB"}, {"criteria": "cpe:2.3:a:ibm:db2:8.1:fp2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8AEBA7BD-E897-438E-8DD5-7AB5490AB931"}, {"criteria": "cpe:2.3:a:ibm:db2:8.1:fp3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BAA746B2-AC20-49D3-B8C6-655C268CB253"}, {"criteria": "cpe:2.3:a:ibm:db2:8.1:fp4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0FEC5C8E-9B3E-457F-8871-1EB172DBA7FD"}, {"criteria": "cpe:2.3:a:ibm:db2:8.1:fp4a:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A8DA176E-1AD6-4524-9931-0165263D4E51"}, {"criteria": "cpe:2.3:a:ibm:db2:8.1:fp5:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AC4145E1-A805-4E64-904C-03B0B13BADBB"}, {"criteria": "cpe:2.3:a:ibm:db2:8.1:fp6:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "281B0499-11FD-4B99-B402-B44B609469E3"}, {"criteria": "cpe:2.3:a:ibm:db2:8.1:fp6a:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "81AB9705-2397-4218-9529-E0DAF3196DAA"}, {"criteria": "cpe:2.3:a:ibm:db2:8.1:fp6b:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2CB197BE-6C4B-4081-8643-3CC3D2FDDB28"}, {"criteria": "cpe:2.3:a:ibm:db2:8.1:fp6c:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "53C13821-A069-41B8-AECD-8562E22F37D7"}, {"criteria": "cpe:2.3:a:ibm:db2:8.1:fp7:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "385C934A-4374-491C-8A61-EBCC5E72AF24"}, {"criteria": "cpe:2.3:a:ibm:db2:8.1:fp7a:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F7A4B9D8-D8FE-4204-8D09-1C69B9676F4A"}, {"criteria": "cpe:2.3:a:ibm:db2:8.1:fp8:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "286E4585-57F7-428D-B9C2-63B33FA2BF5F"}, {"criteria": "cpe:2.3:a:ibm:db2:8.1:fp8a:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E5F0F22B-EEA3-43B3-A600-53A471F32E5F"}, {"criteria": "cpe:2.3:a:ibm:db2:8.1:fp9:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E89ACCE1-873B-4C4A-A64B-F344F96C2C6C"}, {"criteria": "cpe:2.3:a:ibm:db2:8.1:fp9a:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1B5437F4-8DD4-4539-A40A-63C5E2C8CF48"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}