CVE-2006-3067: IBM DB2 Universal Database

Medium severity, CVSS 5.0. EPSS: 2.5% chance of exploitation in the next 30 days.

Multiple unspecified vulnerabilities in IBM DB2 Universal Database (UDB) before 8.1 FixPak 12 allow remote attackers to cause a denial of service (application crash) via a (1) "long column list" in the (a) REPLACE INTO and (b) INSERT INTO portions of the LOAD command or a (2) large number of values in an IN clause, possibly related to a buffer overflow.

Affected products

• IBM DB2 Universal Database: up to and including 8.1; version 8.0 only; version 8.1 only

Published 2006-06-19. Last modified 2026-06-16.