CVE-2013-6717

Severity: medium (CVSS 4.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-12-19 · updated 2026-06-17

Description

The OLAP query engine in IBM DB2 and DB2 Connect 9.7 through FP9, 9.8 through FP5, 10.1 through FP3, and 10.5 through FP2, and the DB2 pureScale Feature 9.8 for Enterprise Server Edition, allows remote authenticated users to cause a denial of service (database outage and deactivation) via unspecified vectors.

Affected products

IBM Db2 for Linux, UNIX and Windows: 9.7, 9.7.0.1, 9.7.0.2, 9.7.0.3, 9.7.0.4, 9.7.0.5 (+15)
IBM Db2 Connect: 9.7, 9.7.0.1, 9.7.0.2, 9.7.0.3, 9.7.0.4, 9.7.0.5 (+15)
IBM Db2 Purescale Feature 9.8: all versions

References

http://secunia.com/advisories/56451
http://www-01.ibm.com/support/docview.wss?uid=swg1IC95641
http://www-01.ibm.com/support/docview.wss?uid=swg1IC97737
http://www-01.ibm.com/support/docview.wss?uid=swg1IC97738
http://www-01.ibm.com/support/docview.wss?uid=swg1IC97762
http://www-01.ibm.com/support/docview.wss?uid=swg21660041
http://www.ibm.com/support/docview.wss?uid=swg21659490
http://www.securityfocus.com/bid/64336
https://exchange.xforce.ibmcloud.com/vulnerabilities/89116
http://secunia.com/advisories/56451
http://www-01.ibm.com/support/docview.wss?uid=swg1IC95641
http://www-01.ibm.com/support/docview.wss?uid=swg1IC97737

Get alerted when CVE-2013-6717 or the next vulnerability affects your stack