Luigi Auriemma has discovered multiple vulnerabilities in IBM solidDB, which can be exploited by malicious people to cause a DoS (Denial of Service).

1) An error in solid.exe when processing certain fields within a packet can be exploited to cause a loop within a recursive function and crash the process.

2) A NULL-pointer dereference error in solid.exe can be exploited to cause the process to crash via a specially crafted packet.

3) An error in solid.exe when processing certain fields within a packet can be exploited to reference an unallocated memory region and crash the process.

The vulnerabilities are confirmed in version 6.5.0 Fix Pack 3 (6.5.0.3 Build 2010-10-04). Other versions may also be affected.

Solution
Apply Fix Pack 8 (6.5.0.8 Build 2011-12-02).

Provided and/or discovered by
Luigi Auriemma

Changelog
Further details available to Secunia VIM customers

Original Advisory
IBM (IC80074​, IC80075​, IC80076​):
http://www.ibm.com/support/docview.wss?uid=swg27021052

Luigi Auriemma:
http://aluigi.altervista.org/adv/soliddb_1-adv.txt

Technical Analysis
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers