CVE-2008-3959

Published: Sep 11, 2008Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

IBM DB2 UDB 8.1 before FixPak 16, 8.2 before FixPak 9, and 9.1 before FixPak 4a allows remote attackers to cause a denial of service (instance crash) via a crafted SQLJRA packet within a CONNECT/ATTACH data stream that simulates a V7 client connect/attach request.

Affected (24)

Products: Ibm: Db2

Ibm

1 product

Db2

Configuration A

24 vulnerable

Vulnerable Software	Affected Versions
Ibm Db2	Up to 8.1
Ibm Db2	Up to 8.2
Ibm Db2	Version 8.1 fp10
Ibm Db2	Version 8.1 fp11
Ibm Db2	Version 8.1 fp12
Ibm Db2	Version 8.1 fp13
Ibm Db2	Version 8.1 fp14
Ibm Db2	Version 8.1 fp1
Ibm Db2	Version 8.1 fp2
Ibm Db2	Version 8.1 fp3
Ibm Db2	Version 8.1 fp4
Ibm Db2	Version 8.1 fp5
Ibm Db2	Version 8.1 fp6
Ibm Db2	Version 8.1 fp7
Ibm Db2	Version 8.1 fp8
Ibm Db2	Version 8.1 fp9
Ibm Db2	Version 8.2
Ibm Db2	Version 8.2 fp1
Ibm Db2	Version 8.2 fp2
Ibm Db2	Version 8.2 fp3
Ibm Db2	Version 8.2 fp4
Ibm Db2	Version 8.2 fp5
Ibm Db2	Version 8.2 fp6
Ibm Db2	Version 8.2 fp7