CVE-2009-0172: IBM DB2 Universal Database

Medium severity, CVSS 5.0. EPSS: 8.5% chance of exploitation in the next 30 days.

Unspecified vulnerability in IBM DB2 8 before FP17a, 9.1 before FP6a, and 9.5 before FP3a allows remote attackers to cause a denial of service (infinite loop) via a crafted CONNECT data stream.

Affected products

• IBM DB2 Universal Database: version 9.1 only; version 9.5 only

Published 2009-01-16. Last modified 2026-06-16.