CVE-2023-30991

🗓️ 16 Oct 2023 22:53:03Reported by ibmType

IBM Db2 for Linux, UNIX and Windows 11.1/11.5 vulnerability for denial of servic

Reporter	Title	Published	Views	Family All 21
IBM Security Bulletins	Security Bulletin: IBM DB2 used by IBM Security Verify Governance has multiple vulnerabilities	10 Jan 202404:23	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data and Db2 Warehouse® on Cloud Pak for Data	2 Jan 202418:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Db2® is vulnerable to denial of service with a specially crafted query (CVE-2023-30991)	29 Nov 202315:22	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Db2 may affect IBM Storage Protect Server.	25 Jun 202516:42	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM® Db2® affect IBM® Db2® Big SQL.	2 Jan 202515:59	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities have been identified in IBM Db2 shipped with IBM WebSphere Remote Server	30 Oct 202320:55	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM DB2 which is shipped with IBM Intelligent Operations Center.	10 Nov 202305:51	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM Db2 shipped with IBM Security Guardium Key Lifecycle Manager	23 Nov 202306:20	–	ibm
BDU FSTEC	The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server, related to errors in processing input data, allows a perpetrator to cause service interruptions.	21 Oct 202300:00	–	bdu_fstec
Circl	CVE-2023-30991	17 Oct 202302:37	–	circl

NVD

Vulners

Node

ibm db2Range11.5–11.5.8

ibm db2Match11.1.4-

ibm db2Match11.1.4fp1

ibm db2Match11.1.4fp2

ibm db2Match11.1.4fp3

ibm db2Match11.1.4fp4

ibm db2Match11.1.4fp5

ibm db2Match11.1.4fp6

AND

linux linux_kernelMatch-

microsoft windowsMatch-

opengroup unixMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "Db2 for Linux, UNIX and Windows",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "11.1, 11.5"
      }
    ]
  }
]

Source	Link
security	www.security.netapp.com/advisory/ntap-20231116-0005/
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/254037
ibm	www.ibm.com/support/pages/node/7047499

21 Nov 2024 08:01Current

7.2High risk

Vulners AI Score7.2

CVSS 3.17.5

EPSS0.00051

CWE-20