Vulnerability Database

289,871

Total vulnerabilities in the database

CVE-2008-3958

IBM DB2 UDB 8 before Fixpak 17 allows remote attackers to cause a denial of service (instance crash) via a crafted CONNECT/ATTACH data stream that simulates a V7 client connect/attach request. NOTE: this may overlap CVE-2008-3858. NOTE: this issue exists because of an incomplete fix for CVE-2008-3959.

  • Published: Sep 11, 2008
  • Updated: Apr 13, 2023
  • CVE: CVE-2008-3958
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Software From Fixed in
ibm / db2 8.0 8.0.x
ibm / db2 8.0-fp11 8.0-fp11.x
ibm / db2 8.0-fp3 8.0-fp3.x
ibm / db2 8.0-fp10 8.0-fp10.x
ibm / db2 8.0-fp9 8.0-fp9.x
ibm / db2 8.0-fp7b 8.0-fp7b.x
ibm / db2 8.0-fp6a 8.0-fp6a.x
ibm / db2 8.0-fp9a 8.0-fp9a.x
ibm / db2 8.0-fp4 8.0-fp4.x
ibm / db2 8.0-fp7a 8.0-fp7a.x
ibm / db2 8.0-fp6 8.0-fp6.x
ibm / db2 8.0-fp8 8.0-fp8.x
ibm / db2 8.0-fp14 8.0-fp14.x
ibm / db2 8.0-fp2 8.0-fp2.x
ibm / db2 - 8.0.x
ibm / db2 8.0-fp5 8.0-fp5.x
ibm / db2 8.0-fp6c 8.0-fp6c.x
ibm / db2 8.0-fp13 8.0-fp13.x
ibm / db2 8.0-fp8a 8.0-fp8a.x
ibm / db2 8.0-fp12 8.0-fp12.x
ibm / db2 8.0-fp6b 8.0-fp6b.x
ibm / db2 8.0-fp15 8.0-fp15.x
ibm / db2 8.0-fp7 8.0-fp7.x