Skip to content
OpenAdvisories
Medium · 6.2 CVE-2019-4101 EUVD-2019-13708GHSA-vwrw-74v6-mgv5

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.1, 10.5, and 11.1 is vulnerable to a denial of service. Users that hav…

Published Jul 1, 2019 · Updated Sep 16, 2024 · Assigned by ibm

Vendor: IBM Product: DB2 for Linux, UNIX and Windows Platform: Linux Platform: Windows

Description

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.1, 10.5, and 11.1 is vulnerable to a denial of service. Users that have both EXECUTE on PD_GET_DIAG_HIST and access to the diagnostic directory on the DB2 server can cause the instance to crash. IBM X-Force ID: 158091.

Affected products

VendorProductAffectedFixed
IBM DB2 for Linux, UNIX and Windows 10.5, 10.1, 11.1 —

References