Denial of service in IBM DB2 LUW

1) DRDA Processing flaw vulnerability

EUVDB-ID: #VU17

Risk: Low

CVSSv3.1: 3.8 [AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C]

CVE-ID: CVE-2016-0211

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

Description

The vulnerability allows a remote attacker to cause the target service to crash.

A remote authenticated attacker can cause the DB2 service to crash by sending a specially crafted DRDA message to vulnerable server.

Successful exploitation of this vulnerability may result in crash of vulnerable service.

Mitigation

IBM has issued fixes for the following versions:

• V9.7: IT12462
• V9.8: IT13350
• V10.1: IT12487
• V10.5: IT12488

Vulnerable software versions External links

http://www-304.ibm.com/support/docview.wss?uid=swg21979984

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.