Lucene search
HistoryOct 16, 2023 - 10:15 p.m.
CVE-2023-38728
ibm
db2
denial of service
xml
query
vulnerability
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
6.8
Confidence
Low
EPSS
0.001
Percentile
35.7%
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted XML query statement. IBM X-Force ID: 262258.
Affected configurations
Node
ibmdb2Range11.5–11.5.8
ORibmdb2Match10.5-
ORibmdb2Match10.5fp1
ORibmdb2Match10.5fp10
ORibmdb2Match10.5fp2
ORibmdb2Match10.5fp3
ORibmdb2Match10.5fp3a
ORibmdb2Match10.5fp4
ORibmdb2Match10.5fp5
ORibmdb2Match10.5fp6
ORibmdb2Match10.5fp7
ORibmdb2Match10.5fp8
ORibmdb2Match10.5fp9
ORibmdb2Match11.1.4-
ORibmdb2Match11.1.4fp1
ORibmdb2Match11.1.4fp2
ORibmdb2Match11.1.4fp3
ORibmdb2Match11.1.4fp4
ORibmdb2Match11.1.4fp5
ORibmdb2Match11.1.4fp6
linuxlinux_kernelMatch-
ORmicrosoftwindowsMatch-
ORopengroupunixMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | db2 | * | cpe:2.3:a:ibm:db2:*:*:*:*:*:*:*:* |
| ibm | db2 | 10.5 | cpe:2.3:a:ibm:db2:10.5:-:*:*:*:*:*:* |
| ibm | db2 | 10.5 | cpe:2.3:a:ibm:db2:10.5:fp1:*:*:*:*:*:* |
| ibm | db2 | 10.5 | cpe:2.3:a:ibm:db2:10.5:fp10:*:*:*:*:*:* |
| ibm | db2 | 10.5 | cpe:2.3:a:ibm:db2:10.5:fp2:*:*:*:*:*:* |
| ibm | db2 | 10.5 | cpe:2.3:a:ibm:db2:10.5:fp3:*:*:*:*:*:* |
| ibm | db2 | 10.5 | cpe:2.3:a:ibm:db2:10.5:fp3a:*:*:*:*:*:* |
| ibm | db2 | 10.5 | cpe:2.3:a:ibm:db2:10.5:fp4:*:*:*:*:*:* |
| ibm | db2 | 10.5 | cpe:2.3:a:ibm:db2:10.5:fp5:*:*:*:*:*:* |
| ibm | db2 | 10.5 | cpe:2.3:a:ibm:db2:10.5:fp6:*:*:*:*:*:* |
Related
prion
prion
Design/Logic Flaw
2023-10-16 22:15:00
cvelist
cvelist
CVE-2023-38728 IBM Db2 denial of service
2023-10-16 21:27:06
cve
cve
CVE-2023-38728
2023-10-16 22:15:11
ibm
ibm
Security Bulletin: IBM® Db2® is vulnerable to denial of service with a specially crafted XML query statement (CVE-2023-38728)
2023-11-29 15:16:31
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
6.8
Confidence
Low
EPSS
0.001
Percentile
35.7%
Related for NVD:CVE-2023-38728