CVE-2014-6159

Severity: low (CVSS 3.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-11-08 · updated 2026-06-17
Weakness: CWE-20

Description

IBM DB2 9.7 before FP10, 9.8 through FP5, 10.1 through FT4, and 10.5 through FP4 on Linux, UNIX, and Windows, when immediate AUTO_REVAL is enabled, allows remote authenticated users to cause a denial of service (daemon crash) via a crafted ALTER TABLE statement.

Affected products

IBM Db2 for Linux, UNIX and Windows: 9.7, 9.8, 10.1, 10.5

References

http://secunia.com/advisories/62092
http://secunia.com/advisories/62093
http://www-01.ibm.com/support/docview.wss?uid=swg1IT04730
http://www-01.ibm.com/support/docview.wss?uid=swg1IT05074
http://www-01.ibm.com/support/docview.wss?uid=swg1IT05105
http://www-01.ibm.com/support/docview.wss?uid=swg1IT05132
http://www-01.ibm.com/support/docview.wss?uid=swg21688051
http://www-01.ibm.com/support/docview.wss?uid=swg21693197
http://www.securityfocus.com/bid/71006
https://exchange.xforce.ibmcloud.com/vulnerabilities/97708
http://secunia.com/advisories/62092
http://secunia.com/advisories/62093

Get alerted when CVE-2014-6159 or the next vulnerability affects your stack