EUVD-2023-42515

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

IBM Db2 11.5 is vulnerable to denial of service via crafted SQL statement, IBM X-Force ID 262613.

Reporter	Title	Published	Views	Family All 23
IBM Security Bulletins	Security Bulletin: IBM DB2 used by IBM Security Verify Governance has multiple vulnerabilities	10 Jan 202404:23	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data and Db2 Warehouse® on Cloud Pak for Data	2 Jan 202418:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Db2® is vulnerable to a denial of service with a specially crafted SQL statement (CVE-2023-38740)	29 Nov 202315:37	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Db2 affect Cloud Pak System	28 Oct 202416:03	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Db2 may affect IBM Storage Protect Server.	25 Jun 202516:42	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM® Db2® affect IBM® Db2® Big SQL.	2 Jan 202515:59	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities have been identified in IBM Db2 shipped with IBM WebSphere Remote Server	30 Oct 202320:55	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM DB2 which is shipped with IBM Intelligent Operations Center.	10 Nov 202305:51	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM Db2 shipped with IBM Security Guardium Key Lifecycle Manager	23 Nov 202306:20	–	ibm
BDU FSTEC	The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server, related to errors in processing input data, allows a perpetrator to cause service interruptions.	21 Oct 202300:00	–	bdu_fstec

[
  {
    "enisaIdVendor": [
      {
        "id": "50085f60-9225-3a00-8396-f6f4d187b9a8",
        "vendor": {
          "name": "IBM"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "ea2c3cd4-070b-3598-bc5a-5a6bc7479611",
        "product": {
          "name": "Db2 for Linux, UNIX and Windows"
        },
        "product_version": "11.5"
      }
    ]
  }
]

Source	Link
ibm	www.ibm.com/support/pages/node/7047489
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/262613
security	www.security.netapp.com/advisory/ntap-20231116-0007/

03 Oct 2025 20:07Current

7.7High risk

Vulners AI Score7.7

CVSS 3.15.3 - 7.5

EPSS0.00048

SSVC

vulnerability denial of service sql statement ibm db2 x-force id