IBM Support

IZ22004: Buffer overflow condition in DAS server code.

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • There exists a buffer overflow condition in DAS server code,
which might lead to DoS, Crash or arbitrary code execution.
This problem was reported to IBM by Diego Bauche of Application
Security Inc.

Local fix

  • No local fix is available.

Problem summary

  • ****************************************************************
USERS AFFECTED:
ALL
****************************************************************
PROBLEM DESCRIPTION:
There exists a buffer overflow condition in DAS server code,
which might lead to DoS, Crash or arbitrary code execution.
This problem was reported to IBM by Diego Bauche of Application
Security Inc.
****************************************************************
RECOMMENDATION:
Upgrading to Version 8.2 Fix Pack 17 resolves the issue.
****************************************************************

Problem conclusion

  • Problem was first fixed in Version 8.2 Fix Pack 17

Temporary fix

  • 



Comments


    

  • Fix Release 820
Fix Commitment Level 999

    



APAR Information




    

  • APAR number
    IZ22004
    • 

  • Reported component name
    DB2 UDB ESE AIX
    • 

  • Reported component ID
    5765F4100
    • 

  • Reported release
    820
    • 

  • Status
    CLOSED  PER
    • 

  • PE
    NoPE
    • 

  • HIPER
    NoHIPER
    • 

  • Special Attention
    NoSpecatt
    • 

  • Submitted date
    2008-05-08
    • 

  • Closed date
    2008-10-14
    • 

  • Last modified date
    2008-10-14
    • 





    

  • APAR is sysrouted FROM one or more of the following:
    

    • 

  • APAR is sysrouted TO one or more of the following:
    

    
IZ22188 IZ22190
    

    • 



Fix information


    

  • Fixed component name
    DB2 UDB ESE AIX
    • 

  • Fixed component ID
    5765F4100
    • 



Applicable component levels


    

  • R820  PSY
       UP
    • 








      
              
                            

              

              [{"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SSEPGG","label":"Db2 for Linux, UNIX and Windows"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"820","Edition":"","Line of Business":{"code":"LOB10","label":"Data and AI"}}]
              

                          

          
 
        

      

    

      

        

          

            
Document Information


            

            


                        

            Modified date:
            

            14 October 2008
            

            
                      

        


        

        


      

    

  



    

  

  
    
            

          
Page Feedback