CVE-2010-3735: IBM DB2

Low severity, CVSS 2.1. EPSS: 0.9% chance of exploitation in the next 30 days.

The "Query Compiler, Rewrite, Optimizer" component in IBM DB2 UDB 9.5 before FP6a allows remote authenticated users to cause a denial of service (CPU consumption) via a crafted query involving certain UNION ALL views, leading to an indefinitely large amount of compilation time.

Affected products

• IBM DB2: version 9.5 only

Published 2010-10-05. Last modified 2026-06-16.