Lucene search

K
cveIbmCVE-2024-31882
HistoryAug 14, 2024 - 6:15 p.m.

CVE-2024-31882

2024-08-1418:15:10
CWE-74
CWE-943
ibm
web.nvd.nist.gov
28
ibm
db2
linux
unix
windows
denial of service
vulnerability
configurations
crash
sql statement
authenticated user
x-force id
287614

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

5.6

Confidence

High

EPSS

0

Percentile

14.1%

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 is vulnerable to a denial of service, under specific configurations, as the server may crash when using a specially crafted SQL statement by an authenticated user. IBM X-Force ID: 287614.

Affected configurations

Nvd
Vulners
Node
ibmdb2Range11.1.411.1.4.7aix
OR
ibmdb2Range11.1.411.1.4.7linux
OR
ibmdb2Range11.1.411.1.4.7windows
OR
ibmdb2Range11.5.011.5.9aix
OR
ibmdb2Range11.5.011.5.9linux
OR
ibmdb2Range11.5.011.5.9windows
VendorProductVersionCPE
ibmdb2*cpe:2.3:a:ibm:db2:*:*:*:*:*:aix:*:*
ibmdb2*cpe:2.3:a:ibm:db2:*:*:*:*:*:linux:*:*
ibmdb2*cpe:2.3:a:ibm:db2:*:*:*:*:*:windows:*:*

CNA Affected

[
  {
    "cpes": [
      "cpe:2.3:a:ibm:db2:11.1:*:*:*:*:linux:*:*",
      "cpe:2.3:a:ibm:db2:11.1:*:*:*:*:unix:*:*",
      "cpe:2.3:a:ibm:db2:11.1:*:*:*:*:aix:*:*",
      "cpe:2.3:a:ibm:db2:11.1:*:*:*:*:hp-ux:*:*",
      "cpe:2.3:a:ibm:db2:11.1:*:*:*:*:windows:*:*",
      "cpe:2.3:a:ibm:db2:11.5:*:*:*:*:linux:*:*",
      "cpe:2.3:a:ibm:db2:11.5:*:*:*:*:unix:*:*",
      "cpe:2.3:a:ibm:db2:11.5:*:*:*:*:aix:*:*",
      "cpe:2.3:a:ibm:db2:11.5:*:*:*:*:hp-ux:*:*",
      "cpe:2.3:a:ibm:db2:11.5:*:*:*:*:windows:*:*"
    ],
    "defaultStatus": "unaffected",
    "product": "Db2 for Linux, UNIX and Windows",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "11.1, 11.5"
      }
    ]
  }
]

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

5.6

Confidence

High

EPSS

0

Percentile

14.1%

Related for CVE-2024-31882