CVE-2008-6821 Memory corruption in n/a

Critical 10.0 Published 3 Jun 2009 Updated 7 Aug 2024

A buffer overflow in the IBM DB2 DAS server allows attackers to execute arbitrary code or cause a denial of service.

Exploited in the wild: Not known
Login needed: Not stated
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2008-6821?

CVE-2008-6821 is a critical memory corruption vulnerability in Ibm Db2, published on 3 Jun 2009. It can be exploited over the network, with no action from the victim.

Official description

Buffer overflow in the DAS server in IBM DB2 8 before FP17, 9.1 before FP5, and 9.5 before FP2 might allow attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors, a different vulnerability than CVE-2007-3676 and CVE-2008-3853.

Weakness: CWE-119

Which versions are affected by CVE-2008-6821?

It affects 1 product.

Products include Ibm Db2.

How do I fix CVE-2008-6821?

No fix has been published for CVE-2008-6821 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2008-6821 being exploited?

There is no known exploitation of CVE-2008-6821 in the wild and no public exploit code.

All Ibm Db2 vulnerabilities

Sources

Also known as GHSA-2vvf-4m7g-gc7w.