Lucene search
IbmCVE-2022-43929HistoryFeb 17, 2023 - 5:15 p.m.
CVE-2022-43929
2023-02-1717:15:11
CWE-20
ibm
web.nvd.nist.gov
118
ibm
db2
dos
vulnerability
load command
security
nvd
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
7.1
Confidence
High
EPSS
0.001
Percentile
36.0%
IBM Db2 for Linux, UNIX and Windows 11.1 and 11.5 may be vulnerable to a Denial of Service when executing a specially crafted ‘Load’ command. IBM X-Force ID: 241676.
Affected configurations
Node
ibmdb2Match11.1linux
ORibmdb2Match11.1unix
ORibmdb2Match11.1windows
ORibmdb2Match11.5linux
ORibmdb2Match11.5unix
ORibmdb2Match11.5windows
hphp-uxMatch-
ORibmaixMatch-
ORlinuxlinux_kernelMatch-
ORmicrosoftwindowsMatch-
ORoraclesolarisMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | db2 | 11.1 | cpe:2.3:a:ibm:db2:11.1:*:*:*:*:linux:*:* |
| ibm | db2 | 11.1 | cpe:2.3:a:ibm:db2:11.1:*:*:*:*:unix:*:* |
| ibm | db2 | 11.1 | cpe:2.3:a:ibm:db2:11.1:*:*:*:*:windows:*:* |
| ibm | db2 | 11.5 | cpe:2.3:a:ibm:db2:11.5:*:*:*:*:linux:*:* |
| ibm | db2 | 11.5 | cpe:2.3:a:ibm:db2:11.5:*:*:*:*:unix:*:* |
| ibm | db2 | 11.5 | cpe:2.3:a:ibm:db2:11.5:*:*:*:*:windows:*:* |
| hp | hp-ux | - | cpe:2.3:o:hp:hp-ux:-:*:*:*:*:*:*:* |
| ibm | aix | - | cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:* |
| linux | linux_kernel | - | cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* |
| microsoft | windows | - | cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* |
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Db2 for Linux, UNIX and Windows",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "11.1 and 11.5"
}
]
}
]Related
nessus
nessus
prion
prion
Design/Logic Flaw
2023-02-17 17:15:00
nvd
nvd
CVE-2022-43929
2023-02-17 17:15:11
cvelist
cvelist
CVE-2022-43929 IBM Db2 for Linux, UNIX and Windows denial of service
2023-02-17 16:57:22
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
7.1
Confidence
High
EPSS
0.001
Percentile
36.0%
Related for CVE-2022-43929