Vulnerabilities > IBM > DB2 > 8.1

DATE CVE VULNERABILITY TITLE RISK
2024-01-22 CVE-2023-47141 Unspecified vulnerability in IBM DB2
IIBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 could allow an authenticated user with CONNECT privileges to cause a denial of service using a specially crafted query.
network
low complexity
ibm
6.5
2024-01-22 CVE-2023-47152 Unspecified vulnerability in IBM DB2
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 is vulnerable to an insecure cryptographic algorithm and to information disclosure in stack trace under exceptional conditions.
network
low complexity
ibm
7.5
2024-01-22 CVE-2023-45193 Unspecified vulnerability in IBM DB2
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 federated server is vulnerable to a denial of service when a specially crafted cursor is used.
network
low complexity
ibm
7.5
2024-01-22 CVE-2023-50308 Unspecified vulnerability in IBM DB2
IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5 under certain circumstances could allow an authenticated user to the database to cause a denial of service when a statement is run on columnar tables.
network
low complexity
ibm
6.5
2023-12-04 CVE-2023-40687 Unspecified vulnerability in IBM DB2
IBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted RUNSTATS command on an 8TB table.
network
low complexity
ibm
7.5
2011-11-09 CVE-2011-1373 Remote Denial of Service vulnerability in IBM DB2
Unspecified vulnerability in IBM DB2 9.7 before FP5 on UNIX, when the Self Tuning Memory Manager (STMM) feature and the AUTOMATIC DATABASE_MEMORY setting are configured, allows local users to cause a denial of service (daemon crash) via unknown vectors.
local
ibm
1.5
2009-08-19 CVE-2009-2860 Unspecified vulnerability in IBM DB2 8.1
Unspecified vulnerability in db2jds in IBM DB2 8.1 before FP18 allows remote attackers to cause a denial of service (service crash) via "malicious packets."
network
low complexity
ibm
5.0
2009-08-19 CVE-2009-2859 Permissions, Privileges, and Access Controls vulnerability in IBM DB2 8.1
IBM DB2 8.1 before FP18 allows attackers to obtain unspecified access via a das command.
local
low complexity
ibm CWE-264
4.6
2009-08-19 CVE-2009-2858 Resource Management Errors vulnerability in IBM DB2 8.1
Memory leak in the Security component in IBM DB2 8.1 before FP18 on Unix platforms allows attackers to cause a denial of service (memory consumption) via unspecified vectors, related to private memory within the DB2 memory structure.
network
low complexity
ibm CWE-399
5.0
2008-09-11 CVE-2008-3959 Denial-Of-Service vulnerability in DB2 8.1/8.2
IBM DB2 UDB 8.1 before FixPak 16, 8.2 before FixPak 9, and 9.1 before FixPak 4a allows remote attackers to cause a denial of service (instance crash) via a crafted SQLJRA packet within a CONNECT/ATTACH data stream that simulates a V7 client connect/attach request.
network
low complexity
ibm
5.0