IBM Support

IZ22004: Buffer overflow condition in DAS server code.

Subscribe

You can track all active APARs for this component.

APAR status

  • Closed as program error.

Error description

  • There exists a buffer overflow condition in DAS server code,
    which might lead to DoS, Crash or arbitrary code execution.
    This problem was reported to IBM by Diego Bauche of Application
    Security Inc.
    

Local fix

  • No local fix is available.
    

Problem summary

  • ****************************************************************
    USERS AFFECTED:
    ALL
    ****************************************************************
    PROBLEM DESCRIPTION:
    There exists a buffer overflow condition in DAS server code,
    which might lead to DoS, Crash or arbitrary code execution.
    This problem was reported to IBM by Diego Bauche of Application
    Security Inc.
    ****************************************************************
    RECOMMENDATION:
    Upgrading to Version 8.2 Fix Pack 17 resolves the issue.
    ****************************************************************
    

Problem conclusion

  • Problem was first fixed in Version 8.2 Fix Pack 17
    

Temporary fix

Comments

  • Fix Release 820
    Fix Commitment Level 999
    

APAR Information

  • APAR number

    IZ22004

  • Reported component name

    DB2 UDB ESE AIX

  • Reported component ID

    5765F4100

  • Reported release

    820

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2008-05-08

  • Closed date

    2008-10-14

  • Last modified date

    2008-10-14

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    IZ22188 IZ22190

Fix information

  • Fixed component name

    DB2 UDB ESE AIX

  • Fixed component ID

    5765F4100

Applicable component levels

  • R820 PSY

       UP



Document information

More support for: DB2 for Linux, UNIX and Windows

Software version: 820

Reference #: IZ22004

Modified date: 14 October 2008