CVE-2012-2180

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2012-06-20 · updated 2026-06-16

Description

The chaining functionality in the Distributed Relational Database Architecture (DRDA) module in IBM DB2 9.7 before FP6 and 9.8 before FP5 allows remote attackers to cause a denial of service (NULL pointer dereference, and resource consumption or daemon crash) via a crafted request.

Affected products

IBM Db2 for Linux, UNIX and Windows: 9.7, 9.7.0.1, 9.7.0.2, 9.7.0.3, 9.7.0.4, 9.7.0.5 (+3)

References

http://www.ibm.com/support/docview.wss?uid=swg1IC82234
http://www.ibm.com/support/docview.wss?uid=swg1IC82367
http://www.ibm.com/support/docview.wss?uid=swg21597090
http://www.securityfocus.com/bid/53873
https://exchange.xforce.ibmcloud.com/vulnerabilities/75418
http://www.ibm.com/support/docview.wss?uid=swg1IC82234
http://www.ibm.com/support/docview.wss?uid=swg1IC82367
http://www.ibm.com/support/docview.wss?uid=swg21597090
http://www.securityfocus.com/bid/53873
https://exchange.xforce.ibmcloud.com/vulnerabilities/75418

Get alerted when CVE-2012-2180 or the next vulnerability affects your stack