CVE-2007-5652: IBM DB2

High severity, CVSS 7.8. EPSS: 1.8% chance of exploitation in the next 30 days.

IBM DB2 UDB 9.1 before Fixpak 4 does not properly manage storage of a list containing authentication information, which might allow attackers to cause a denial of service (instance crash) or trigger memory corruption. NOTE: the vendor description of this issue is too vague to be certain that it is security-related.

Affected products

• IBM DB2: up to and including 9.1; version 9.1 only

Published 2007-10-23. Last modified 2026-06-16.