CVE-2008-3958

Published: Sep 11, 2008Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

IBM DB2 UDB 8 before Fixpak 17 allows remote attackers to cause a denial of service (instance crash) via a crafted CONNECT/ATTACH data stream that simulates a V7 client connect/attach request. NOTE: this may overlap CVE-2008-3858. NOTE: this issue exists because of an incomplete fix for CVE-2008-3959.

Affected (23)

Products: Ibm: Db2

Ibm

1 product

Db2

Configuration A

23 vulnerable

Vulnerable Software	Affected Versions
Ibm Db2	Up to 8.0
Ibm Db2	Version 8.0
Ibm Db2	Version 8.0 fp10
Ibm Db2	Version 8.0 fp11
Ibm Db2	Version 8.0 fp12
Ibm Db2	Version 8.0 fp13
Ibm Db2	Version 8.0 fp14
Ibm Db2	Version 8.0 fp15
Ibm Db2	Version 8.0 fp2
Ibm Db2	Version 8.0 fp3
Ibm Db2	Version 8.0 fp4
Ibm Db2	Version 8.0 fp5
Ibm Db2	Version 8.0 fp6
Ibm Db2	Version 8.0 fp6a
Ibm Db2	Version 8.0 fp6b
Ibm Db2	Version 8.0 fp6c
Ibm Db2	Version 8.0 fp7
Ibm Db2	Version 8.0 fp7a
Ibm Db2	Version 8.0 fp7b
Ibm Db2	Version 8.0 fp8
Ibm Db2	Version 8.0 fp8a
Ibm Db2	Version 8.0 fp9
Ibm Db2	Version 8.0 fp9a