CVE-2014-8901

Published: Dec 18, 2014Modified: May 6, 2026

4.0

Vector

AV:N/AC:L/Au:S/C:N/I:N/A:P

Exploitability: 8.0 / Impact: 2.9

Source: NVD

Description

IBM DB2 9.5 through FP10, 9.7 through FP10, 9.8 through FP5, 10.1 through FP4, and 10.5 before FP5 allows remote authenticated users to cause a denial of service (CPU consumption) via a crafted XML query.

Affected (5)

Products: Ibm: Db2

Ibm

1 product

Db2

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Ibm Db2	Version 10.1
Ibm Db2	Version 10.5
Ibm Db2	Version 9.5
Ibm Db2	Version 9.7
Ibm Db2	Version 9.8

Related CWEs

CWE-399

References (16)

http://www-01.ibm.com/support/docview.wss?uid=swg1IT05933

Source: psirt@us.ibm.com

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg1IT05936

Source: psirt@us.ibm.com

http://www-01.ibm.com/support/docview.wss?uid=swg1IT05937

Source: psirt@us.ibm.com

http://www-01.ibm.com/support/docview.wss?uid=swg1IT05938

Source: psirt@us.ibm.com

http://www-01.ibm.com/support/docview.wss?uid=swg1IT05939

Source: psirt@us.ibm.com

http://www-01.ibm.com/support/docview.wss?uid=swg21692358

Source: psirt@us.ibm.com

http://www.securityfocus.com/bid/71734

Source: psirt@us.ibm.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/99110

Source: psirt@us.ibm.com

http://www-01.ibm.com/support/docview.wss?uid=swg1IT05933