CVE-2008-6821

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-06-03 · updated 2026-06-16
Weakness: CWE-119

Description

Buffer overflow in the DAS server in IBM DB2 8 before FP17, 9.1 before FP5, and 9.5 before FP2 might allow attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors, a different vulnerability than CVE-2007-3676 and CVE-2008-3853.

Affected products

IBM Db2 for Linux, UNIX and Windows: 8.0-fp1, 8.0-fp10, 8.0-fp11, 8.0-fp12, 8.0-fp13, 8.0-fp14 (+9)

References

http://secunia.com/advisories/31787
http://www-01.ibm.com/support/docview.wss?uid=swg1IZ22004
http://www-01.ibm.com/support/docview.wss?uid=swg1IZ22188
http://www-01.ibm.com/support/docview.wss?uid=swg1IZ22190
http://www-01.ibm.com/support/docview.wss?uid=swg21318189
http://www.securityfocus.com/bid/35408
https://exchange.xforce.ibmcloud.com/vulnerabilities/51108
http://secunia.com/advisories/31787
http://www-01.ibm.com/support/docview.wss?uid=swg1IZ22004
http://www-01.ibm.com/support/docview.wss?uid=swg1IZ22188

Get alerted when CVE-2008-6821 or the next vulnerability affects your stack