CVE-2021-29702

Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1.4 and 11.5.5 is vulnerable to a denial of service as the server terminates abnormally when…

High · published June 16, 2021

CVSS v3.0
7.5
EPSS
2%
Percentile
79.3
In the wild
Unconfirmed
What it is

Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1.4 and 11.5.5 is vulnerable to a denial of service as the server terminates abnormally when executing a specially crafted SELECT statement. IBM X-Force ID: 200658.

The record
Technical detail
CVSS v3.0
7.5 · HIGH
Vector
CVSS:3.0/AV:N/C:N/PR:N/UI:N/S:U/A:H/AC:L/I:N/RL:O/RC:C/E:U
CVSS v4.0
Not supplied
EPSS
0.01884 · 79.3th percentile
Published
2021-06-16T16:15Z
EPSS history
Timeline
  • 16 JUN 16:15Z
    Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1.4 and 11.5.5 is vulnerable to a denial of service as the server terminates abnormally when…
    cvelistv5