Denial of Service Vulnerability in IBM solidDB by Remote Attackers

CVE-2010-4055

Summary

A stack consumption vulnerability has been identified in solid.exe of IBM solidDB versions 6.5.0.3 and earlier. This vulnerability allows remote attackers to exploit the system by connecting to TCP port 1315 and sending specially crafted packets containing numerous integer fields. The exploitation of this vulnerability triggers extensive recursive function calls, leading to significant memory consumption, ultimately resulting in the daemon crashing and rendering the database service unavailable to legitimate users.

References