IZ36534: SECURITY: MALICIOUS CONNECT DATA STREAM CAN CAUSE DENIAL OF SERV ICE.

DB2 Version 9.1 Fix Pack 7  for Linux, UNIX and Windows
DB2 Version 9.1 Fix Pack 6a for Linux, UNIX and Windows
DB2 Version 9.1 Fix Pack 7a  for Linux, UNIX and Windows
DB2 Version 9.1 Fix Pack 8  for Linux, UNIX and Windows
DB2 Version 9.1 Fix Pack 9  for Linux, UNIX and Windows
DB2 Version 9.1 Fix Pack 10  for Linux, UNIX and Windows
DB2 Version 9.1 Fix Pack 11  for Linux, UNIX and Windows
DB2 Version 9.1 Fix Pack 12  for Linux, UNIX and Windows

APAR status

• Closed as program error.

Error description

• A malicious connect data stream can cause the DB2 server
  to go into an infinite loop, incapacitating the server
  .
  This problem was reported to IBM by Dennis Yurichev.
  

Local fix

• In the past, we recommended setting DB2_MINIMUM_CLIENT_LEVEL to
  SQL07031 to disable DB2RA connects (DB2 V7 and lower clients)
  to workaround DB2RA connect security vulnerabilities, however,
  this vulnerability is in the DRDA protocol and thus the
  workaround will not work.  The DRDA protocol is used by DB2 V8
  (and higher) clients and servers.
  

Problem summary

• ****************************************************************
  USERS AFFECTED:
  All DB2 systems on all Linux, Unix and Windows platforms at
  service levels from Version 9.1 GA through to Version 9.1 Fix
  Pack 6.
  ****************************************************************
  PROBLEM DESCRIPTION:
  A malicious DRDA connect data stream can cause the DB2 server
  to go into infinite loop, incapacitating the server.
  .
  This problem was reported to IBM by Dennis Yurichev.
  ****************************************************************
  RECOMMENDATION:
  Upgrade to DB2 V9.1 FP6a and above.
  ****************************************************************
  

Problem conclusion

• The DB2 server will keep the machine busy and the overall
  performance of the machine will degrade.
  .
  The complete fix for this problem first appears in DB2 Version
  9.1 Fix Pack 6a and all the subsequent Fix Packs.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  IZ37696 IZ37697

Fix information

• Fixed component name

  DB2 UDB ESE AIX

• Fixed component ID

  5765F4100

Applicable component levels

• R910 PSN

     UP