CVEvulnerability

CVE-2009-4325

6.4 MEDIUM Published 2009-12-16 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-12-16
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.4 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:P
Weaknesses
CWE-20

Description

The Client Interfaces component in IBM DB2 8.2 before FP18, 9.1 before FP8, 9.5 before FP5, and 9.7 before FP1 does not validate an unspecified pointer, which allows attackers to overwrite "external memory" via unknown vectors, related to a missing "check for null pointers."

Affected configurations

• ibm db2 8.2 • ibm db2 9.1 • ibm db2 9.5 • ibm db2 9.7

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References