Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
IBM solidDB 06.00.1018 and earlier does not validate a certain field that specifies an amount of memory to allocate, which allows remote attackers to cause a denial of service (daemon exit) via a packet with a large value in this field.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IBM solidDB格式串及拒绝服务漏洞
Vulnerability Description
IBM solidDB是可实现电信级性能的关系数据库 。 solidDB的日志函数中存在格式串处理漏洞，如果用户使用了畸形的用户或对等端名称的话，就可能向日志中写入恶意脚本或命令并在管理员查看日志时执行 。 solidDB服务器使用了客户端所提供的32位数字作为读取数组中某些值的索引，如果设置了很多数字的话，就可能访问无效内存，导致服务器崩溃 。 如果用户向服务器发送了特制报文的话，就可能触发空指针引用，或通过分配一定数量的内存导致Out of central memory错误消息，服务器会终止 。
CVSS Information
N/A
Vulnerability Type
N/A