IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5is vulnerable to a denial of service, under specific configurations, as the server may crash when using a specially crafted SQL statement by an authenticated user. IBM X-Force ID: 287612.
References
| Link | Resource |
|---|---|
| https://www.ibm.com/support/pages/node/7156851 | Vendor Advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/287612 | VDB Entry |
Configurations
Configuration 1 (hide)
|
History
07 Aug 2024, 16:58
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
| First Time |
Ibm
Ibm db2 |
|
| CPE | cpe:2.3:a:ibm:db2:11.1:*:*:*:*:linux:*:* cpe:2.3:a:ibm:db2:11.5:*:*:*:*:unix:*:* cpe:2.3:a:ibm:db2:10.5:*:*:*:*:unix:*:* cpe:2.3:a:ibm:db2:10.5:*:*:*:*:linux:*:* cpe:2.3:a:ibm:db2:11.1:*:*:*:*:windows:*:* cpe:2.3:a:ibm:db2:11.1:*:*:*:*:unix:*:* cpe:2.3:a:ibm:db2:10.5:*:*:*:*:windows:*:* cpe:2.3:a:ibm:db2:11.5:*:*:*:*:linux:*:* cpe:2.3:a:ibm:db2:11.5:*:*:*:*:windows:*:* |
|
| CWE | NVD-CWE-noinfo | |
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/287612 - VDB Entry | |
| References | () https://www.ibm.com/support/pages/node/7156851 - Vendor Advisory |
12 Jun 2024, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-06-12 19:15
Updated : 2024-08-07 16:58
NVD link : CVE-2023-29267
Mitre link : CVE-2023-29267
JSON object : View
Products Affected
ibm
- db2
CWE