Boletines de Vulnerabilidades

IBM Security Bulletin: IBM® DB2® XML Query Will Cause Excessive CPU Usage (CVE-2014-8901)


Información sobre el sistema

   
Software afectado IBM

Descripción

IBM DB2 contains a security vulnerability which could allow a remote, authenticated user to exploit a vulnerability in DB2s XML library to cause a disruption of service. CVE(s): CVE-2014-8901 Affected product(s) and affected version(s): All fix pack levels of IBM DB2 V9.5, V9.7, V10.1 and V10.5 editions listed below and running on AIX, Linux, HP, Solaris or Windows are affected. IBM DB2 Express Edition IBM DB2 Workgroup Server Edition IBM DB2 Enterprise Server Edition IBM DB2 Advanced

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_ibm_reg_db2_reg_xml_query_will_cause_excessive_cpu_usage_cve_2014_8901?lang=en_us

Identificadores estándar

Propiedad Valor
CVE CVE-2014-8901 ,CVE-2014-6210 ,CVE-2014-6209 ,CVE-2014-6176 ,CVE-2014-6457 and CVE-2014-3566.

Histórico de versiones

Versión Comentario Fecha
1.0 Advisory issued 2014-12-19

Miembros de

Ministerio de Defensa
CNI
CCN
CCN-CERT