Vulnerability Bulletins |
IBM Security Bulletin: IBM InfoSphere BigInsights contains a denial of service vulnerability that can be exploited by a remote, authenticated DB2 user issuing a specially-crafted SELECT statement with |
|
| Affected software | IBM |
|
InfoSphere BigInsights Big SQL contains a denial of service vulnerability. A remote, authenticated DB2 user could exploit this vulnerability by issuing a specially-crafted SELECT statement with ROUND or TRUNCATE function. The vulnerability exists in the IBM DB2 component included in BigInsights that is used by the Big SQL server. CVE(s): CVE-2015-0157 Affected product(s) and affected version(s): IBM InfoSphere BigInsights: 3.0, 3.0.0.1, 3.0.0.2 Refer to the following reference URLs More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_ibm_infosphere_biginsights_contains_a_denial_of_service_vulnerability_that_can_be_exploited_by_a_remote_authenticated_db2_user_issuing_a_specially_crafted_select_statement_wi |
|