Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
2.1

IBM DB2 9.5 may use excessive CPU from crafted query

CVE-2010-3735 · published 16 years ago
Summary

If a user with database access sends a specially built query, the DB2 server can spend a lot of processing time, slowing down or stopping other work. This affects DB2 version 9.5 before the FP6a update. Apply the latest IBM fix pack or upgrade to a newer release, and restrict query access to trusted users.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
ibm db2 9.5
cpe:2.3:a:ibm:db2:9.5:*:*:*:*:*:*:*
Original advisory text
The "Query Compiler, Rewrite, Optimizer" component in IBM DB2 UDB 9.5 before FP6a allows remote authenticated users to cause a denial of service (CPU consumption) via a crafted query involving cert...
The "Query Compiler, Rewrite, Optimizer" component in IBM DB2 UDB 9.5 before FP6a allows remote authenticated users to cause a denial of service (CPU consumption) via a crafted query involving certain UNION ALL views, leading to an indefinitely large amount of compilation time.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
2.1 Low
Exploitation
<1% chance of attack within 30 days
Type
CWE-399Resource Management Errors
Timeline
Published5 Oct 2010
Updated3 Nov 2026
First seen29 Sep 2026
Sources
CVE-2010-3735 · NVD
Track software like this
Free during beta