InfoSphere Guardium contains a flaw that may allow a local denial of service. The issue is triggered when an error occurs in the aix_ktap S-TAP module during the monitoring of database connections when using shared memory. When handling a specially crafted multi-threaded application, a local attacker can cause a loss of availability for the program.
Classification
Location:
Local Access Required
Attack Type:
Denial of Service
Impact:
Loss of Availability
Solution:
Upgrade
Exploit:
Exploit Unknown
Disclosure:
Vendor Verified
OSVDB:
Authentication Required
Solution
Upgrade to revision r39471 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.
