CVE-2019-4101

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.1, 10.5, and 11.1 is vulnerable to a denial of service

Medium · published July 1, 2019

CVSS v3.0
6.2
EPSS
0%
Percentile
32.3
In the wild
Unconfirmed
What it is

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.1, 10.5, and 11.1 is vulnerable to a denial of service. Users that have both EXECUTE on PD_GET_DIAG_HIST and access to the diagnostic directory on the DB2 server can cause the instance to crash. IBM X-Force ID: 158091.

The record
Technical detail
CVSS v3.0
6.2 · MEDIUM
Vector
CVSS:3.0/UI:N/I:N/AV:L/AC:L/C:N/PR:N/A:H/S:U/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00393 · 32.3th percentile
Published
2019-07-01T15:05Z
EPSS history
Timeline
  • 01 JUL 15:05Z
    IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.1, 10.5, and 11.1 is vulnerable to a denial of service
    cvelistv5