CVE-2012-2180: IBM DB2

Medium severity, CVSS 4.3. EPSS: 2% chance of exploitation in the next 30 days.

The chaining functionality in the Distributed Relational Database Architecture (DRDA) module in IBM DB2 9.7 before FP6 and 9.8 before FP5 allows remote attackers to cause a denial of service (NULL pointer dereference, and resource consumption or daemon crash) via a crafted request.

Affected products

• IBM DB2: version 9.7 only; version 9.7.0.1 only; version 9.7.0.2 only; version 9.7.0.3 only; version 9.7.0.4 only; version 9.7.0.5 only; …

Published 2012-06-20. Last modified 2026-06-16.