CVE-2023-30431 IBM Db2 buffer overflow

2023-07-0923:58:32

CWE-119

ibm

raw.githubusercontent.com

ibm db2

buffer overflow

vulnerability

versions 10.5

11.1

11.5

improper bounds checking

arbitrary code

ibm x-force id 252184

6.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.2%

JSON

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 db2set is vulnerable to a buffer overflow, caused by improper bounds checking. An attacker could overflow the buffer and execute arbitrary code. IBM X-Force ID: 252184.