CVE-2006-3066: IBM DB2 Universal Database

Medium severity, CVSS 5.0. EPSS: 2% chance of exploitation in the next 30 days.

Buffer overflow in the TCP/IP listener in IBM DB2 Universal Database (UDB) before 8.1 FixPak 12 allows remote attackers to cause a denial of service (application crash) via a long MGRLVLLS message inside of an EXCSAT message when establishing a connection.

Affected products

• IBM DB2 Universal Database: up to and including 8.10; version 8.0 only; version 8.1 only; version 8.1.4 only; version 8.1.5 only; version 8.1.6 only; …

Published 2006-06-19. Last modified 2026-06-16.