PT-2014-5085

CVE-2014-3094

·

Publicado

2014-09-04

·

Atualizado

2017-08-29

Descrição por

CVSS 2.0
8.5
Alta
MétricasAV:N/AC:M/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions IBM DB2 versions 9.7 through 9.7 FP9a IBM DB2 versions 9.8 through 9.8 FP5 IBM DB2 versions 10.1 through 10.1 FP4 IBM DB2 versions 10.5 before 10.5 FP4
Description A stack-based buffer overflow issue allows remote authenticated users to execute arbitrary code via a crafted ALTER MODULE statement.
Recommendations For IBM DB2 versions 9.7 through 9.7 FP9a, update to a version after 9.7 FP9a. For IBM DB2 versions 9.8 through 9.8 FP5, update to a version after 9.8 FP5. For IBM DB2 versions 10.1 through 10.1 FP4, update to a version after 10.1 FP4. For IBM DB2 versions 10.5 before 10.5 FP4, update to 10.5 FP4 or later.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Enumeração de fraquezas
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
Identificadores relacionados
CVE-2014-3094
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com