VULNERABILITY INTELLIGENCE

CVE-2008-3858

CVSS score4.3 MEDIUM
EPSS probability1.85%
CISA KEVNot currently listed
Published2008-08-28
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:N/I:N/A:P

Description

The Downlevel DB2RA Support component in IBM DB2 9.1 before Fixpak 4a allows remote attackers to cause a denial of service (instance crash) via a crafted CONNECT data stream that simulates a V7 client connect request.

Primary references