Description
The XML feature in IBM DB2 9.5 before FP9, 9.7 through FP5, and 9.8 through FP4 allows remote authenticated users to cause a denial of service (infinite loop) by calling the XMLPARSE function with a crafted string expression.
References
- db2-xmlfeature-dos(73496) vdb-entry
- http://www-01.ibm.com/support/docview.wss?uid=swg21588098
- oval:org.mitre.oval:def:14450 vdb-entry signature
- IC81380 vendor-advisory
- IC81379 vendor-advisory
- IC81837 vendor-advisory