CVE

Id
70390  
CVE No.
CVE-2014-3095  
Status
Candidate  
Description
The SQL engine in IBM DB2 9.5 through FP10, 9.7 through FP9a, 9.8 through FP5, 10.1 through FP4, and 10.5 before FP4 on Linux, UNIX, and Windows allows remote authenticated users to cause a denial of service (daemon crash) via a crafted UNION clause in a subquery of a SELECT statement.  
Phase
Assigned (20140429)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
669745 70390 CVE-2014-3095 CONFIRM:http://www-01.ibm.com/support/docview.wss?uid=swg21681623  View
669746 70390 CVE-2014-3095 CONFIRM:http://www-01.ibm.com/support/docview.wss?uid=swg21683297  View
669747 70390 CVE-2014-3095 AIXAPAR:IT02433  View
669748 70390 CVE-2014-3095 URL:http://www-01.ibm.com/support/docview.wss?uid=swg1IT02433  View
669749 70390 CVE-2014-3095 AIXAPAR:IT02643  View
669750 70390 CVE-2014-3095 URL:http://www-01.ibm.com/support/docview.wss?uid=swg1IT02643  View
669751 70390 CVE-2014-3095 AIXAPAR:IT02644  View
669752 70390 CVE-2014-3095 URL:http://www-01.ibm.com/support/docview.wss?uid=swg1IT02644  View
669753 70390 CVE-2014-3095 AIXAPAR:IT02645  View
669754 70390 CVE-2014-3095 URL:http://www-01.ibm.com/support/docview.wss?uid=swg1IT02645  View
669755 70390 CVE-2014-3095 AIXAPAR:IT02646  View
669756 70390 CVE-2014-3095 URL:http://www-01.ibm.com/support/docview.wss?uid=swg1IT02646  View
669757 70390 CVE-2014-3095 BID:69546  View
669758 70390 CVE-2014-3095 URL:http://www.securityfocus.com/bid/69546  View
669759 70390 CVE-2014-3095 SECUNIA:60845  View
669760 70390 CVE-2014-3095 URL:http://secunia.com/advisories/60845  View
669761 70390 CVE-2014-3095 SECUNIA:58725  View
669762 70390 CVE-2014-3095 URL:http://secunia.com/advisories/58725  View
669763 70390 CVE-2014-3095 XF:ibm-db2-cve20143095-dos(94263)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
15513 JVNDB-2014-004388 IBM Rational ClearQuest の Web コンポーネントにおけるセッション Cookie をキャプチャされる脆弱性 IBM Rational ClearQuest の Web コンポーネントは、HTTPS セッション内のセッション Cookie に対して secure フラグを設定しないため、セッション Cookie をキャプチャされる脆弱性が存在します。 CVE-2014-3103 70390 5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004388.html  View