CVE-2016-0211

Severity: medium (CVSS 4.3 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-04-28 · updated 2026-06-17
Weakness: CWE-20

Description

IBM DB2 9.7 through FP11, 9.8, 10.1 through FP5, and 10.5 through FP7 on Linux, UNIX, and Windows allows remote authenticated users to cause a denial of service (daemon crash) via a crafted DRDA message.

Affected products

IBM Db2 for Linux, UNIX and Windows: 9.8, 9.8.0.1, 9.8.0.2, 9.8.0.3, 9.8.0.4, 9.8.0.5 (+26)
IBM Db2 Connect: 9.8, 9.8.0.1, 9.8.0.2, 9.8.0.3, 9.8.0.4, 9.8.0.5 (+26)

References

http://www-01.ibm.com/support/docview.wss?uid=swg1IT12462
http://www-01.ibm.com/support/docview.wss?uid=swg1IT12487
http://www-01.ibm.com/support/docview.wss?uid=swg1IT12488
http://www-01.ibm.com/support/docview.wss?uid=swg1IT13350
http://www-01.ibm.com/support/docview.wss?uid=swg21979984
http://www.securityfocus.com/bid/85979
http://www.securitytracker.com/id/1035660
http://www-01.ibm.com/support/docview.wss?uid=swg1IT12462
http://www-01.ibm.com/support/docview.wss?uid=swg1IT12487
http://www-01.ibm.com/support/docview.wss?uid=swg1IT12488
http://www-01.ibm.com/support/docview.wss?uid=swg1IT13350
http://www-01.ibm.com/support/docview.wss?uid=swg21979984

Get alerted when CVE-2016-0211 or the next vulnerability affects your stack