Unrated severityNVD Advisory· Published Aug 28, 2008· Updated Apr 23, 2026
CVE-2008-3854
CVE-2008-3854
Description
Multiple stack-based buffer overflows in IBM DB2 9.1 before Fixpak 5 and 9.5 before Fixpak 1 allow remote attackers to cause a denial of service (system outage) via vectors related to (1) use of XQuery to issue statements; the (2) XMLQUERY, (3) XMLEXISTS, and (4) XMLTABLE statements; and the (5) sqlrlaka function.
Affected products
30cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:linux:*:*:*:*:*+ 29 more
- cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:linux:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:solaris:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:windows:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:9.1:fp4a:aix:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:9.1:fp4a:hp-ux:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:9.1:fp4a:linux:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:9.1:fp4a:solaris:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:9.1:fp4a:windows:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:9.5:*:aix:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:9.5:*:hp-ux:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:9.5:*:linux:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:9.5:*:solaris:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:9.1:*:aix:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:9.1:*:hp_ux:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:9.1:*:linux:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:9.1:*:solaris:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:9.1:*:windows:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:aix:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:hp-ux:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:linux:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:solaris:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:9.1:fp2:windows:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:aix:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:hp-ux:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:linux:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:solaris:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:9.1:fp3:windows:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:aix:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:9.1:fp4:hp-ux:*:*:*:*:*
- cpe:2.3:a:ibm:db2_universal_database:9.5:*:windows:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
10- secunia.com/advisories/30558nvdPatchVendor Advisory
- www-1.ibm.com/support/docview.wssnvdPatch
- www-1.ibm.com/support/docview.wssnvdPatch
- www-1.ibm.com/support/docview.wssnvdPatch
- www.securityfocus.com/bid/29601nvdPatch
- www.vupen.com/english/advisories/2008/1769nvdVendor Advisory
- www-1.ibm.com/support/docview.wssnvd
- www.securityfocus.com/archive/1/496406/100/0/threadednvd
- exchange.xforce.ibmcloud.com/vulnerabilities/42930nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/42935nvd
News mentions
0No linked articles in our index yet.