IZ22004: Buffer overflow condition in DAS server code.

APAR status

• Closed as program error.

Error description

• There exists a buffer overflow condition in DAS server code,
  which might lead to DoS, Crash or arbitrary code execution.
  This problem was reported to IBM by Diego Bauche of Application
  Security Inc.
  

Local fix

• No local fix is available.
  

Problem summary

• ****************************************************************
  USERS AFFECTED:
  ALL
  ****************************************************************
  PROBLEM DESCRIPTION:
  There exists a buffer overflow condition in DAS server code,
  which might lead to DoS, Crash or arbitrary code execution.
  This problem was reported to IBM by Diego Bauche of Application
  Security Inc.
  ****************************************************************
  RECOMMENDATION:
  Upgrading to Version 8.2 Fix Pack 17 resolves the issue.
  ****************************************************************
  

Problem conclusion

• Problem was first fixed in Version 8.2 Fix Pack 17
  

Temporary fix

Comments

• Fix Release 820
  Fix Commitment Level 999
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  IZ22188 IZ22190

Fix information

• Fixed component name

  DB2 UDB ESE AIX

• Fixed component ID

  5765F4100

Applicable component levels

• R820 PSY

     UP