CVE-2006-6638

no score yetEPSS 2.3%

IBM DB2 8.1 before FixPak 14 allows remote attackers to cause a denial of service via a crafted SQLJRA packet, which causes a NULL pointer dereference in the sqle_db2ra_as_recvrequest function in DB2ENGN.DLL, a different issue than CVE-2006-4257.

EPSS: 2.3% chance of exploitation in the next 30 days; higher than 83% of CVEs (scores of 2026-10-31)
Published: 2006-12-19
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

ibm:db2_universal_database

References

http://secunia.com/advisories/23397
http://www-1.ibm.com/support/docview.wss?uid=swg1IY91847
http://www.appsecinc.com/resources/alerts/db2/2006-11-30.shtml
http://www.securityfocus.com/bid/21646
http://secunia.com/advisories/23397

Check your stack JSON