CVE-2016-0215: IBM DB2

Medium severity, CVSS 6.5. EPSS: 1.6% chance of exploitation in the next 30 days.

IBM DB2 9.7, 10.1 before FP6, and 10.5 before FP8 on AIX, Linux, HP, Solaris and Windows allow remote authenticated users to cause a denial of service (daemon crash) via a SELECT statement with a subquery containing the AVG OLAP function on an Oracle compatible database.

Affected products

• IBM DB2: version 9.7 only; version 10.1 only; version 10.5 only; version 9.8 only

Published 2018-01-16. Last modified 2026-06-17.