CVE-2023-47747 - IBM Db2 denial of service

Back Back to CVE browser

MEDIUM

IBM Db2 denial of service

Published Jan 22, 2024

6.5

MEDIUM

CVSS 3.1

EPSS 0.74%

Description

IBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.1, 10.5, and 11.1 could allow an authenticated user with CONNECT privileges to cause a denial of service using a specially crafted query. IBM X-Force ID: 272646.

Affected products

Vendor IBM Product Db2 for Linux, UNIX and Windows Default
unaffected
- Version
  10.5, 11.1 ,11.5
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

IBM

Db2 for Linux, UNIX and Windows

unaffected

Version	Status	Constraints
10.5, 11.1 ,11.5	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-51845
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/272646
vdb-entryVDB EntryVendor Advisory
https://security.netapp.com/advisory/ntap-20240307-0002/
https://www.ibm.com/support/pages/node/7105502
vendor-advisoryPatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-51845		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/272646		vdb-entryVDB EntryVendor Advisory
https://security.netapp.com/advisory/ntap-20240307-0002/
https://www.ibm.com/support/pages/node/7105502		vendor-advisoryPatchVendor Advisory