CVE-2023-40687

🗓️ 04 Dec 2023 01:10:23Reported by ibmType

IBM DB2 for Linux, UNIX and Windows vulnerable to denial of service via specially crafted RUNSTATS comman

Reporter	Title	Published	Views	Family All 17
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities have been identified in IBM Db2 shipped with IBM WebSphere Remote Server	14 Dec 202321:06	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM DB2 which is shipped with IBM Intelligent Operations Center.	18 Dec 202308:12	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Db2 and IBM WebSphere Application Server traditional used by IBM Security Verify Governance have multiple vulnerabilities	10 Jul 202416:30	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Db2 affect Cloud Pak System	28 Oct 202416:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Db2® is vulnerable to denial of service with a specially crafted RUNSTATS command. (CVE-2023-40687)	20 Dec 202319:57	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM Db2 shipped with IBM Security Guardium Key Lifecycle Manager	14 Dec 202307:21	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Db2 may affect IBM Storage Protect Server.	25 Mar 202409:18	–	ibm
BDU FSTEC	The vulnerability of the IBM DB2 database management system, which arises due to insufficient validation of input data, allows a hacker to trigger a service failure.	15 Dec 202300:00	–	bdu_fstec
Circl	CVE-2023-40687	22 Dec 202309:51	–	circl
CNNVD	IBM Db2 输入验证错误漏洞	4 Dec 202300:00	–	cnnvd

NVD

Vulners

Node

ibm db2Range≤10.5.0.11

ibm db2Range11.1.0.0–11.1.4.7

ibm db2Range11.5–11.5.9

AND

linux linux_kernelMatch-

microsoft windowsMatch-

opengroup unixMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "Db2 for Linux, UNIX and Windows",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "10.5, 11.1, 11.5"
      }
    ]
  }
]

Source	Link
ibm	www.ibm.com/support/pages/node/7087149
security	www.security.netapp.com/advisory/ntap-20240119-0001/
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/264809

21 Nov 2024 08:19Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.15.3 - 7.5

EPSS0.0009

CWE-20