CVE-2023-38740

IBM Db2 for Linux, UNIX, and Windows (includes Db2 Connect Server) 11.5 is vulnerable to a denial of service with a specially crafted SQL statement. IBM X-Force ID: 262613.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:ibm:db2:*:*:*:*:*:*:*:*
OR cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
cpe:2.3:o:opengroup:unix:-:*:*:*:*:*:*:*

History

22 Dec 2023, 21:08

Type Values Removed Values Added
References () https://security.netapp.com/advisory/ntap-20231116-0007/ - () https://security.netapp.com/advisory/ntap-20231116-0007/ - Third Party Advisory

16 Nov 2023, 16:15

Type Values Removed Values Added
References
  • () https://security.netapp.com/advisory/ntap-20231116-0007/ -

19 Oct 2023, 14:34

Type Values Removed Values Added
References
  • (MISC) https://www.ibm.com/support/pages/node/7047554 - Patch, Vendor Advisory
References (MISC) https://www.ibm.com/support/pages/node/7047489 - (MISC) https://www.ibm.com/support/pages/node/7047489 - Not Applicable
References (MISC) https://exchange.xforce.ibmcloud.com/vulnerabilities/262613 - (MISC) https://exchange.xforce.ibmcloud.com/vulnerabilities/262613 - VDB Entry, Vendor Advisory
CPE cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:*:*:*:*:*:*:*:*
cpe:2.3:o:opengroup:unix:-:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
CWE NVD-CWE-noinfo
First Time Ibm
Opengroup
Opengroup unix
Linux linux Kernel
Linux
Ibm db2
Microsoft
Microsoft windows
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.5

17 Oct 2023, 12:38

Type Values Removed Values Added
New CVE

Information

Published : 2023-10-16 22:15

Updated : 2023-12-22 21:08


NVD link : CVE-2023-38740

Mitre link : CVE-2023-38740


JSON object : View

Products Affected

linux

  • linux_kernel

ibm

  • db2

opengroup

  • unix

microsoft

  • windows