CVE-2014-6210 json
IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 through FP4, and 10.5 before FP5 on Linux, UNIX, and Windows allows remote authenticated us…
published 11y ago modified 4mo ago also EUVD-2014-6096
- cvss
- 4.0
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 2.5%
- EPSS 2.5% chance of exploitation in 30 days, percentile 84%
- public exploits
- 0
- none known
Summary
IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 through FP4, and 10.5 before FP5 on Linux, UNIX, and Windows allows remote authenticated users to cause a denial of service (daemon crash) by specifying the same column within multiple ALTER TABLE statements.
Is CVE-2014-6210 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.
Check with FencerExploit prediction
2.49% chance of exploitation in the next 30 days, higher than 84% of all scored CVEs (FIRST EPSS, 2026-11-09).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 4.0 | AV:N/AC:L/Au:S/C:N/I:N/A:P |
Classification
- Weakness
-
- CWE-20 Improper Input Validation
- Technology feeds
References
-
www-01.ibm.com
/support/docview.wss?uid=swg1IT05652
vendor-advisory
-
www-01.ibm.com
/support/docview.wss?uid=swg1IT05651
vendor-advisory
-
www-01.ibm.com
/support/docview.wss?uid=swg1IT04138
vendor-advisory
-
www-01.ibm.com
/support/docview.wss?uid=swg1IC96934
vendor-advisory
-
secunia.com
/advisories/62092
third-party-advisory
-
securityfocus.com
/bid/71730
vdb-entry
-
securitytracker.com
/id/1034572
vdb-entry
- www-01.ibm.com /support/docview.wss?uid=swg21693197
- www-01.ibm.com /support/docview.wss?uid=swg21690891
-
exchange.xforce.ibmcloud.com
/vulnerabilities/98685
vdb-entry
Sources
- CVE List CVE-2014-6210
- NVD CVE-2014-6210
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.