VULNERABILITY INTELLIGENCE
CVE-2008-1966
CVSS score4 MEDIUM
EPSS probability2.68%
CISA KEVNot currently listed
Published2008-04-27
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:S/C:N/I:N/A:P
Description
Multiple buffer overflows in the JAR file administration routines in the BSU JAVA subcomponent in IBM DB2 8 before FP16, 9.1 before FP4a, and 9.5 before FP1 allow remote authenticated users to cause a denial of service (instance crash) via a call to the (1) RECOVERJAR or (2) REMOVE_JAR procedure with a crafted parameter, related to (a) sqlj.install_jar and (b) sqlj.replace_jar.
Weakness classification
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer