CVE-2006-6638

Published: Dec 19, 2006Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

IBM DB2 8.1 before FixPak 14 allows remote attackers to cause a denial of service via a crafted SQLJRA packet, which causes a NULL pointer dereference in the sqle_db2ra_as_recvrequest function in DB2ENGN.DLL, a different issue than CVE-2006-4257.

Affected (13)

Products: Ibm: Db2 Universal Database

Ibm

1 product

Db2 Universal Database

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Ibm Db2 Universal Database	Version 8.1.4
Ibm Db2 Universal Database	Version 8.1.5
Ibm Db2 Universal Database	Version 8.1.6
Ibm Db2 Universal Database	Version 8.1.6c
Ibm Db2 Universal Database	Version 8.1.7
Ibm Db2 Universal Database	Version 8.1.7b
Ibm Db2 Universal Database	Version 8.1.8
Ibm Db2 Universal Database	Version 8.1.8a
Ibm Db2 Universal Database	Version 8.1.9
Ibm Db2 Universal Database	Version 8.1.9a
Ibm Db2 Universal Database	Version 8.10
Ibm Db2 Universal Database	Version 8.12
Ibm Db2 Universal Database	Version 8.1