CVE-2013-3031
CVE-2013-3031 is a low-severity vulnerability in Ibm Soliddb with a CVSS 2.0 base score of 3.5. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-119.
Key facts
- Severity: Low (CVSS 2.0 base score 3.5)
- EPSS exploit prediction: 1% (64th percentile)
- Actively exploited: Not listed in CISA KEV
- Weakness: CWE-119
- Affected product: Ibm Soliddb
- Published:
- Last modified:
Description
A SQL stored procedure in the Universal Cache component in IBM solidDB 6.0.x before 6.0.1070, 6.3.x before 6.3.0.56, 6.5.x before 6.5.0.12, and 7.0.x before 7.0.0.4 allows remote authenticated users to cause a denial of service (uninitialized-memory access and daemon crash) via a call that includes named arguments and default parameter values, but does not include all of the expected arguments.
Frequently asked questions
- What is CVE-2013-3031?
- A SQL stored procedure in the Universal Cache component in IBM solidDB 6.0.x before 6.0.1070, 6.3.x before 6.3.0.56, 6.5.x before 6.5.0.12, and 7.0.x before 7.0.0.4 allows remote authenticated users to cause a denial of service (uninitialized-memory access and daemon crash) via a call that includes named arguments and default parameter values, but does not include all of the expected arguments.
- How severe is CVE-2013-3031?
- CVE-2013-3031 has a CVSS 2.0 base score of 3.5, rated low severity.
- Is CVE-2013-3031 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (64th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2013-3031?
- CVE-2013-3031 primarily affects Ibm Soliddb. In total, 41 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2013-3031?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2013-3031 published?
- CVE-2013-3031 was published on 2013-09-09 and last updated on 2026-06-16.
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1IC88796
- http://www-01.ibm.com/support/docview.wss?uid=swg1IC88797
- http://www-01.ibm.com/support/docview.wss?uid=swg1IC94043
- http://www-01.ibm.com/support/docview.wss?uid=swg1IC94044
- http://www-01.ibm.com/support/docview.wss?uid=swg21643599
- https://exchange.xforce.ibmcloud.com/vulnerabilities/84593
Affected products (41)
- cpe:2.3:a:ibm:soliddb:6.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:soliddb:6.0.1060:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:soliddb:6.0.1061:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:soliddb:6.0.1064:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:soliddb:6.0.1065:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:soliddb:6.0.1066:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:soliddb:6.0.1067:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:soliddb:6.0.1068:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:soliddb:6.0.1069:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:soliddb:6.3.33:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:soliddb:6.3.34:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:soliddb:6.3.37:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:soliddb:6.3.38:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:soliddb:6.3.39:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:soliddb:6.3.40:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:soliddb:6.3.41:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:soliddb:6.3.42:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:soliddb:6.3.44:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:soliddb:6.3.47:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:soliddb:6.3.48:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:soliddb:6.3.49:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:soliddb:6.3.52:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:soliddb:6.3.53:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:soliddb:6.3.54:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:soliddb:6.3.55:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:soliddb:6.5.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:soliddb:6.5.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:soliddb:6.5.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:soliddb:6.5.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:soliddb:6.5.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:soliddb:6.5.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:soliddb:6.5.0.6:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:soliddb:6.5.0.7:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:soliddb:6.5.0.8:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:soliddb:6.5.09:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:soliddb:6.5.10:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:soliddb:6.5.11:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:soliddb:7.0.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:soliddb:7.0.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:soliddb:7.0.0.2:*:*:*:*:*:*:*
More vulnerabilities in Ibm Soliddb
- CVE-2010-2771 — Critical (CVSS 10.0): solid.exe in IBM solidDB before 6.5 FP2 allows remote attackers to execute arbitrary code via a long username field in…
- CVE-2011-1560 — Critical (CVSS 9.3): solid.exe in IBM solidDB before 4.5.181, 6.0.x before 6.0.1067, 6.1.x and 6.3.x before 6.3.47, and 6.5.x before 6.5.0.3…
- CVE-2011-1208 — High (CVSS 7.8): IBM solidDB 4.5.x before 4.5.182, 6.0.x before 6.0.1069, 6.1.x and 6.3.x before 6.3 FP8 (aka 6.3.49), and 6.5.x before…
- CVE-2008-1705 — Medium (CVSS 6.8): Format string vulnerability in the logging function in IBM solidDB 06.00.1018 and earlier allows remote attackers to…
- CVE-2010-4057 — Medium (CVSS 5.0): solid.exe in IBM solidDB 6.5.0.3 and earlier does not properly perform a recursive call to a certain function upon…
- CVE-2010-4056 — Medium (CVSS 5.0): solid.exe in IBM solidDB 6.5.0.3 and earlier does not properly perform a recursive call to a certain function upon…
All CVEs affecting Ibm Soliddb →
Other CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer) vulnerabilities
- CVE-2026-2778 — Critical (CVSS 10.0): Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component. This vulnerability was fixed in…
- CVE-2026-2776 — Critical (CVSS 10.0): Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software. This vulnerability…
- CVE-2025-1866 — Critical (CVSS 10.0): Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in warmcat libwebsockets allows…
- CVE-2022-27625 — Critical (CVSS 10.0): A vulnerability regarding improper restriction of operations within the bounds of a memory buffer is found in the…
- CVE-2022-27624 — Critical (CVSS 10.0): A vulnerability regarding improper restriction of operations within the bounds of a memory buffer is found in the…
- CVE-2020-11896 — Critical (CVSS 10.0): The Treck TCP/IP stack before 6.0.1.66 allows Remote Code Execution, related to IPv4 tunneling.