Skip to content
OpenAdvisories
High WID-SEC-2022-0770 28 CVEs

IBM DB2: Mehrere Schwachstellen

Published Apr 23, 2020 · Updated Jan 8, 2026 · Revision 10 · de-DE

Vendor: EMC Vendor: Hitachi Vendor: IBM Vendor: Red Hat Product: Avamar Product: Db2 Product: Enterprise Linux Product: Ops Center Product: SPSS Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um seine Privilegien zu erhöhen oder einen Denial of Service zu verursachen

Product

IBM DB2 ist ein relationales Datenbanksystem (RDBS) von IBM.

Vulnerabilities 28

  • Critical 9.8
    CVE-2019-17195 Public exploit EPSS 11%

    Improper Check for Unusual or Exceptional Conditions in Connect2id Nimbus JOSE+JWT

    Connect2id Nimbus JOSE+JWT before v7.9 can throw various uncaught exceptions while parsing a JWT, which could result in an application crash (potential information disclosure) or a potential authentication bypass.

    com.nimbusds:nimbus-jose-jwt Maven
  • Critical 9.8
    CVE-2019-17571 Public exploit EPSS 70%

    Deserialization of Untrusted Data in Log4j

    Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited to remotely execute arbitrary code when combined with a deserialization gadget when listening to untrusted network traffic for log dat…

    Apache Software Foundation Log4j druid apache-log4j1.2 Debian Ubuntu Wolfi Maven
  • High 8.8
    CVE-2018-8009

    Path Traversal in Hadoop

    Apache Hadoop 3.1.0, 3.0.0-alpha to 3.0.2, 2.9.0 to 2.9.1, 2.8.0 to 2.8.4, 2.0.0-alpha to 2.7.6, 0.23.0 to 0.23.11 is exploitable via the zip slip vulnerability in places that accept a zip file.

    Apache Software Foundation Apache Hadoop org.apache.hadoop:hadoop-main Maven
  • High 8.1
    CVE-2019-10202

    Deserialization of Untrusted Data in org.codehaus.jackson:jackson-mapper-asl

    A series of deserialization vulnerabilities have been discovered in Codehaus 1.9.x implemented in EAP 7. This CVE fixes CVE-2017-17485, CVE-2017-7525, CVE-2017-15095, CVE-2018-5968, CVE-2018-7489, CVE-2018-1000873, CVE-2019-12086 reported for FasterXML jackso…

    Red Hat codehaus tez spark-4.0-scala-2.13 Wolfi Maven
  • High 7.5
    CVE-2015-2156

    Information Exposure in Netty

    Netty before 3.9.8.Final, 3.10.x before 3.10.3.Final, 4.0.x before 4.0.28.Final, and 4.1.x before 4.1.0.Beta5 and Play Framework 2.x before 2.3.9 might allow remote attackers to bypass the httpOnly flag on cookies and obtain sensitive information by leveragin…

    netty netty io.netty:netty org.jboss.netty:netty Debian Ubuntu Maven
  • High 7.5
    CVE-2017-12972

    Nimbus JOSE+JWT missing overflow check

    In Nimbus JOSE+JWT before 4.39, there is no integer-overflow check when converting length values from bytes to bits, which allows attackers to conduct HMAC bypass attacks by shifting Additional Authenticated Data (AAD) and ciphertext so that different plainte…

    com.nimbusds:nimbus-jose-jwt Maven
  • High 7.5
    CVE-2017-12974

    Improper Verification of Cryptographic Signature in Nimbus JOSE+JWT

    Nimbus JOSE+JWT before 4.36 proceeds with ECKey construction without ensuring that the public x and y coordinates are on the specified curve, which allows attackers to conduct an Invalid Curve Attack in environments where the JCE provider lacks the applicable…

    com.nimbusds:nimbus-jose-jwt Maven
  • High 7.5
    CVE-2017-18640 EPSS 27%

    SnakeYAML Entity Expansion during load operation

    The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564.

    org.yaml:snakeyaml snakeyaml snakeyaml Debian Ubuntu Maven
  • High 7.5
    CVE-2017-5637 Public exploit EPSS 73%

    Uncontrolled Resource Consumption in Apache ZooKeeper

    Two four letter word commands "wchp/wchc" are CPU intensive and could cause spike of CPU utilization on Apache ZooKeeper server if abused, which leads to the server unable to serve legitimate client requests. Apache ZooKeeper thru version 3.4.9 and 3.5.2 suff…

    Apache Software Foundation Apache ZooKeeper zookeeper zookeeper Debian Ubuntu Maven
  • High 7.5
    CVE-2018-8012

    Missing Authorization in Apache ZooKeeper

    No authentication/authorization is enforced when a server attempts to join a quorum in Apache ZooKeeper before 3.4.10, and 3.5.0-alpha through 3.5.3-beta. As a result an arbitrary end point could join the cluster and begin propagating counterfeit changes to t…

    Apache Software Foundation Apache ZooKeeper zookeeper zookeeper Debian Ubuntu Maven
  • High 7.5
    CVE-2019-12402 EPSS 16%

    Denial of Service in Apache Commons Compress

    The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially crafted inputs. This can lead to a denial of service attack if an attacker can choose the file names inside of an …

    Apache Software Foundation Apache Commons Compress libcommons-compress-java org.apache.commons:commons-compress Debian Ubuntu Maven
  • High 7.5
    CVE-2019-16869

    HTTP Request Smuggling in Netty

    Netty before 4.1.42.Final mishandles whitespace before the colon in HTTP headers (such as a "Transfer-Encoding : chunked" line), which leads to HTTP request smuggling.

    druid netty netty io.netty:netty Debian Ubuntu Wolfi Maven
  • High 7.5
    CVE-2019-9512 EPSS 83%

    Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service

    Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service. The attacker sends continual pings to an HTTP/2 peer, causing the peer to build an internal queue of responses. Depending on how efficiently this data is qu…

    go stdlib golang-1.8 golang-1.10 Debian Ubuntu Azure Linux Alpine Go
  • High 7.5
    CVE-2019-9514 EPSS 83%

    Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service

    Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service. The attacker opens a number of streams and sends an invalid request over each stream that should solicit a stream of RST_STREAM frames from the peer. Depe…

    nodejs go golang-1.8 golang-1.10 Debian Ubuntu Azure Linux Alpine
  • High 7.5
    CVE-2019-9515 EPSS 87%

    Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service

    Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service. The attacker sends a stream of SETTINGS frames to the peer. Since the RFC requires that the peer reply with one acknowledgement per SETTINGS frame, an …

    nodejs trafficserver netty trafficserver Debian Ubuntu Alpine
  • High 7.5
    CVE-2019-9518 EPSS 25%

    Some HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of service

    Some HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of service. The attacker sends a stream of frames with an empty payload and without the end-of-stream flag. These frames can be DATA, HEADERS, CONTINUATION …

    nodejs trafficserver netty trafficserver Debian Ubuntu Alpine
  • High 7.3
    CVE-2019-10086 EPSS 29%

    Insecure Deserialization in Apache Commons Beanutils

    In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default chara…

    Apache Apache Commons Beanutils trino trino-plugin-opensearch Debian Ubuntu Wolfi Maven
  • Medium 5.9
    CVE-2016-2402 Public exploit

    Improper Certificate Validation in OkHttp

    OkHttp before 2.7.4 and 3.x before 3.1.2 allows man-in-the-middle attackers to bypass certificate pinning by sending a certificate chain with a certificate from a non-pinned trusted CA and the pinned certificate.

    com.squareup.okhttp3:okhttp Maven
  • Medium 5.9
    CVE-2018-10237

    Denial of Service in Google Guava

    Unbounded memory allocation in Google Guava 11.0 through 24.x before 24.1.1 allows remote attackers to conduct denial of service attacks against servers that depend on this library and deserialize attacker-provided data, because the AtomicDoubleArray class (w…

    druid guava-libraries com.google.guava:guava guava-libraries Debian Ubuntu Wolfi Maven
  • Medium 5.9
    CVE-2019-0201

    Access control bypass in Apache ZooKeeper

    An issue is present in Apache ZooKeeper 1.0.0 to 3.4.13 and 3.5.0-alpha to 3.5.4-beta. ZooKeeper’s getACL() command doesn’t check any permission when retrieves the ACLs of the requested node and returns all information contained in the ACL Id field as plainte…

    Apache Software Foundation Apache ZooKeeper zookeeper zookeeper Debian Ubuntu Maven
  • Medium 5.9
    CVE-2019-10172 Public exploit EPSS 17%

    Improper Restriction of XML External Entity Reference in jackson-mapper-asl

    A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries. XML external entity vulnerabilities similar CVE-2016-3720 also affects codehaus jackson-mapper-asl libraries but in different classes.

    Red Hat jackson-mapper-asl tez spark-4.0-scala-2.13 Debian Ubuntu Wolfi Maven
  • Medium 5.5
    CVE-2018-11771

    Moderate severity vulnerability that affects org.apache.commons:commons-compress

    When reading a specially crafted ZIP archive, the read method of Apache Commons Compress 1.7 to 1.17's ZipArchiveInputStream can fail to return the correct EOF indication after the end of the stream has been reached. When combined with a java.io.InputStreamRe…

    Apache Software Foundation Apache Commons Compress org.apache.commons:commons-compress libcommons-compress-java Debian Ubuntu Maven
  • Low 3.1
    CVE-2017-12973

    Nimbus JOSE+JWT vulnerable to padding oracle attack

    Nimbus JOSE+JWT before 4.39 proceeds improperly after detection of an invalid HMAC in authenticated AES-CBC decryption, which allows attackers to conduct a padding oracle attack.

    com.nimbusds:nimbus-jose-jwt Maven
  • Unscored —
    CVE-2009-0001

    Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (applicat…

  • High —
    CVE-2014-0114 Public exploit EPSS 99%

    Arbitrary code execution in Apache Commons BeanUtils

    Apache Commons BeanUtils, as distributed in lib/commons-beanutils-1.8.0.jar in Apache Struts 1.x through 1.3.10 and in other products requiring commons-beanutils through 1.9.2, does not suppress the class property, which allows remote attackers to "manipulate…

    commons-beanutils commons-beanutils:commons-beanutils commons-beanutils Debian Ubuntu Maven
  • Medium —
    CVE-2014-0193

    Netty denial of service vulnerability

    WebSocket08FrameDecoder in Netty 3.6.x before 3.6.9, 3.7.x before 3.7.1, 3.8.x before 3.8.2, 3.9.x before 3.9.1, and 4.0.x before 4.0.19 allows remote attackers to cause a denial of service (memory consumption) via a TextWebSocketFrame followed by a long stre…

    io.netty:netty io.netty:netty-all Maven
  • Medium —
    CVE-2014-3488

    Denial of service in Netty

    The SslHandler in Netty before 3.9.2 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted SSLv2Hello message.

    io.netty:netty-handler Maven
  • Unscored —
    CVE-2017-3734 Rejected

    DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigat…

Revision history

  1. #10

    Neue Updates von IBM aufgenommen

  2. #9

    Neue Updates von IBM aufgenommen

  3. #8

    Neue Updates von Dell aufgenommen

  4. #7

    Neue Updates von HITACHI aufgenommen

  5. #6

    Neue Updates von IBM aufgenommen

  6. #5

    Neue Updates von HITACHI aufgenommen

  7. #4

    Neue Updates von Red Hat aufgenommen

  8. #3

    Neue Updates von Red Hat aufgenommen

  9. #2

    Neue Updates von Red Hat aufgenommen

  10. #1

    Initiale Fassung

References