IBM Soliddb vulnerabilities

13 CVEs affecting IBM Soliddb, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-3031, published 2013-09-09.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2010-4056, published 2010-10-23. Medium severity, CVSS 5.0. EPSS: 8.4% chance of exploitation in the next 30 days. solid.exe in IBM solidDB 6.5.0.3 and earlier does not properly perform a recursive call to a certain function upon receiving packet data containing a single integer field, which allows remote…
CVE-2010-4057, published 2010-10-23. Medium severity, CVSS 5.0. EPSS: 7.2% chance of exploitation in the next 30 days. solid.exe in IBM solidDB 6.5.0.3 and earlier does not properly perform a recursive call to a certain function upon receiving packet data containing many integer fields with two different values,…
CVE-2010-4055, published 2010-10-23. Medium severity, CVSS 5.0. EPSS: 7.2% chance of exploitation in the next 30 days. Stack consumption vulnerability in solid.exe in IBM solidDB 6.5.0.3 and earlier allows remote attackers to cause a denial of service (memory consumption and daemon crash) by connecting to TCP port…
CVE-2010-2771, published 2010-07-22. High severity, CVSS 10.0. EPSS: 5.4% chance of exploitation in the next 30 days. solid.exe in IBM solidDB before 6.5 FP2 allows remote attackers to execute arbitrary code via a long username field in the first handshake packet.
CVE-2012-0200, published 2012-02-21. Medium severity, CVSS 4.0. EPSS: 5.4% chance of exploitation in the next 30 days. The server in IBM solidDB 6.5 before Interim Fix 6 does not properly initialize data structures, which allows remote authenticated users to cause a denial of service (daemon crash) via a SELECT…
CVE-2011-1560, published 2011-04-05. High severity, CVSS 9.3. EPSS: 4% chance of exploitation in the next 30 days. solid.exe in IBM solidDB before 4.5.181, 6.0.x before 6.0.1067, 6.1.x and 6.3.x before 6.3.47, and 6.5.x before 6.5.0.3 uses a password-hash length specified by the client, which allows remote…
CVE-2011-1208, published 2011-05-05. High severity, CVSS 7.8. EPSS: 3.3% chance of exploitation in the next 30 days. IBM solidDB 4.5.x before 4.5.182, 6.0.x before 6.0.1069, 6.1.x and 6.3.x before 6.3 FP8 (aka 6.3.49), and 6.5.x before 6.5 FP4 (aka 6.5.0.4) does not properly handle the (1) rpc_test_svc_readwrite…
CVE-2008-1705, published 2008-04-09. Medium severity, CVSS 6.8. EPSS: 3.2% chance of exploitation in the next 30 days. Format string vulnerability in the logging function in IBM solidDB 06.00.1018 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the (1) user name, (2) peer…
CVE-2008-1707, published 2008-04-09. Medium severity, CVSS 4.3. EPSS: 2.3% chance of exploitation in the next 30 days. IBM solidDB 06.00.1018 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a packet with an 0x11 value in a certain "type" field.
CVE-2011-4890, published 2012-02-21. Medium severity, CVSS 4.0. EPSS: 2% chance of exploitation in the next 30 days. The server in IBM solidDB 6.5 before FP9 and 7.0 before FP1 allows remote authenticated users to cause a denial of service (daemon crash) via a SELECT statement with a ROWNUM condition involving a…

Latest

CVE-2013-3031, published 2013-09-09. Low severity, CVSS 3.5. EPSS: 1.2% chance of exploitation in the next 30 days. A SQL stored procedure in the Universal Cache component in IBM solidDB 6.0.x before 6.0.1070, 6.3.x before 6.3.0.56, 6.5.x before 6.5.0.12, and 7.0.x before 7.0.0.4 allows remote authenticated users…
CVE-2008-1708, published 2008-04-09. Medium severity, CVSS 4.3. EPSS: 1.6% chance of exploitation in the next 30 days. IBM solidDB 06.00.1018 and earlier does not validate a certain field that specifies an amount of memory to allocate, which allows remote attackers to cause a denial of service (daemon exit) via a…