CVEvulnerability

CVE-2009-4327

5.0 MEDIUM Published 2009-12-16 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-12-16
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-20

Description

The Common Code Infrastructure component in IBM DB2 9.5 before FP5 and 9.7 before FP1 does not properly validate the size of a memory pool during a creation attempt, which allows attackers to cause a denial of service (memory consumption) via unspecified vectors.

Affected configurations

• ibm db2 9.5 • ibm db2 9.7

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References