VULNERABILITY INTELLIGENCE
CVE-2014-6097
CVSS score4 MEDIUM
EPSS probability1.90%
CISA KEVNot currently listed
Published2014-11-08
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:S/C:N/I:N/A:P
Description
IBM DB2 9.7 before FP10 and 9.8 through FP5 on Linux, UNIX, and Windows allows remote authenticated users to cause a denial of service (daemon crash) via a crafted ALTER TABLE statement.
Weakness classification
- CWE-20: Improper Input Validation
Primary references
- psirt@us.ibm.com — Vendor Advisory
- psirt@us.ibm.com
- psirt@us.ibm.com — Patch, Vendor Advisory
- psirt@us.ibm.com
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108