The vulnerability of the Federated Server of the IBM DB2 database management system allows a perpetrator to execute arbitrary code or cause a service failure.

🗓️ 18 Jul 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 4 Views

IBM DB2 Federated Server vulnerability allows code execution or service failure via memory bounds.

Reporter	Title	Published	Views	Family All 20
IBM Security Bulletins	Security Bulletin: Vulnerabilities in IBM DB2 affects IBM Application Performance Management.	13 Sep 202307:52	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data and Db2 Warehouse® on Cloud Pak for Data	10 Oct 202320:58	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities have been identified in IBM Db2 shipped with IBM WebSphere Remote Server	18 Jul 202320:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Db2® with Federated configuration is vulnerable to arbitrary code execution. (CVE-2023-35012)	11 Jul 202321:03	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM DB2 affect IBM Operations Analytics Predictive Insights	18 Aug 202314:15	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM Db2 shipped with IBM Security Guardium Key Lifecycle Manager	9 Aug 202311:59	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM DB2 shipped with IBM Intelligent Operations Center(CVEs - Remediation/Fixes)	25 Jul 202311:02	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities Affect IBM Db2 Database Server shipped with IBM OpenPages	7 Sep 202321:37	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities identified in IBM DB2 used by IBM Security Verify Governance - Identity Manager	5 Sep 202322:25	–	ibm
CNNVD	IBM DB2 缓冲区错误漏洞	11 Jul 202300:00	–	cnnvd

Vulners

Node

ibm ibm_db2Range11.5–11.5.7

OR

ibm ibm_db2Match11.5.8

OR

ibm ibm_db2_connect_serverMatch11.5.8

OR

ibm ibm_db2_connect_serverRange11.5–11.5.7

Source	Link
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/257763
ibm	www.ibm.com/support/pages/node/7010747
vuldb	www.vuldb.com/ru/
ibm	www.ibm.com/mysupport/s/defect/aCI3p0000000FRZ/dt215550
web	www.web.nvd.nist.gov/view/vuln/detail

18 Jul 2023 00:00Current

7.5High risk

Vulners AI Score7.5

CVSS 26.5

CVSS 36.7

EPSS0.00225

database two federated server memory bounds arbitrary code execution service failure