Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.0

IBM DB2 FCM can be crashed remotely in multi-node setups

CVE-2013-4032 · published 13 years ago
Summary

The Fast Communications Manager component in IBM DB2 Enterprise Server Edition and Advanced Enterprise Server Edition (versions 10.1 before FP3 and 10.5) can be targeted when the database runs on multiple servers. An attacker can send specially crafted data that forces the component to stop working, causing the database service to become unavailable. Apply the latest IBM DB2 fix packs or updates that address this issue to keep the service running.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
ibm db2 10.1
10.5
cpe:2.3:a:ibm:db2:10.1:*:*:*:*:*:*:*
Original advisory text
The Fast Communications Manager (FCM) in IBM DB2 Enterprise Server Edition and Advanced Enterprise Server Edition 10.1 before FP3 and 10.5, when a multi-node configuration is used, allows remote at...
The Fast Communications Manager (FCM) in IBM DB2 Enterprise Server Edition and Advanced Enterprise Server Edition 10.1 before FP3 and 10.5, when a multi-node configuration is used, allows remote attackers to cause a denial of service via vectors involving arbitrary data.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
5.0 Medium
Exploitation
2% chance of attack within 30 days
Type
CWE-20Improper Input Validation
Timeline
Published2 Oct 2013
Updated29 Oct 2026
First seen29 Sep 2026
Sources
CVE-2013-4032 · NVD
Track software like this
Free during beta