CVE-2023-50308

CVE-2023-50308 affects IBM Db2 for Linux, UNIX and Windows (including DB2 Connect Server) 11.5. Under certain conditions, an authenticated user issuing a statement on columnar tables could cause a denial of service. The vulnerability is documented across IBM/Red Hat/IBM X-Force sources and is ass...

CVE-2023-50308 IBM Db2 denial of service

IBM Db2 for Linux, UNIX and Windows includes DB2 Connect Server 11.5 under certain circumstances could allow an authenticated user to the database to cause a denial of service when a statement is run on columnar tables. IBM X-Force ID: 273393...

CVE-2023-47746 IBM Db2 denial of service

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5, 11.1, and 11.5 could allow an authenticated user with CONNECT privileges to cause a denial of service using a specially crafted query. IBM X-Force ID: 272644...

CVE-2023-47746 IBM Db2 denial of service

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5, 11.1, and 11.5 could allow an authenticated user with CONNECT privileges to cause a denial of service using a specially crafted query. IBM X-Force ID: 272644...

CVE-2023-47746

CVE-2023-47746 affects IBM Db2 for Linux/UNIX/Windows (including Db2 Connect Server) across versions 10.5, 11.1 and 11.5. An authenticated user with CONNECT privileges could cause a denial of service via a specially crafted query. Remediation: upgrade to Db2 Warehouse/Db2 version 11.5.9.0 or late...

Security Bulletin: Multiple security vulnerabilities have been identified in IBM DB2 which is shipped with IBM Intelligent Operations Center.

Summary Multiple security vulnerabilities have been identified in IBM DB2 shipped with IBM Intelligent Operations Center. Information about security vulnerabilities affecting IBM DB2 has been published in a security bulletin CVE-2023-47158, CVE-2023-47145, CVE-2023-47747, CVE-2023-27859,...

CVE-2023-47141: Improper Input Validation

IIBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 11.5 could allow an authenticated user with CONNECT privileges to cause a denial of service using a specially crafted query. IBM X-Force ID: 270264...

PT-2024-12148

Name of the Vulnerable Software and Affected Versions IBM Db2 versions 10.1 through 11.1 Description The issue allows a remote user to execute arbitrary code caused by installing like-named jar files across multiple databases. A user could exploit this by installing a malicious jar file that...

CVE-2023-47158: Improper Input Validation

IBM DB2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5, 11.1 and 11.5 could allow an authenticated user with CONNECT privileges to cause a denial of service using a specially crafted query. IBM X-Force ID: 270750...

CVE-2023-50308: Improper Input Validation

IBM Db2 for Linux, UNIX and Windows includes DB2 Connect Server 11.5 under certain circumstances could allow an authenticated user to the database to cause a denial of service when a statement is run on columnar tables. IBM X-Force ID: 273393...

CVE-2023-47747: Improper Input Validation

IBM DB2 for Linux, UNIX and Windows includes Db2 Connect Server 10.1, 10.5, and 11.1 could allow an authenticated user with CONNECT privileges to cause a denial of service using a specially crafted query. IBM X-Force ID: 272646...

CVE-2023-47746: Improper Input Validation

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5, 11.1, and 11.5 could allow an authenticated user with CONNECT privileges to cause a denial of service using a specially crafted query. IBM X-Force ID: 272644...

CVE-2023-47152: Generation of Error Message Containing Sensitive Information

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 11.5 is vulnerable to an insecure cryptographic algorithm and to information disclosure in stack trace under exceptional conditions...

CVE-2023-45193: Improper Input Validation

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 11.5 federated server is vulnerable to a denial of service when a specially crafted cursor is used. IBM X-Force ID: 268759...

CVE-2023-27859: Uncontrolled Search Path Element

IBM Db2 10.1, 10.5, and 11.1 could allow a remote user to execute arbitrary code caused by installing like named jar files across multiple databases. A user could exploit this by installing a malicious jar file that overwrites the existing like named jar file in another database. IBM X-Force ID:...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK and IBM Java Runtime affect IBM® Db2®. (Oct 2023 CPU)

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 7.1.5.19 and earlier, 8.0.8.11 and earlier used by IBM® Db2®. These issues were disclosed as part of the IBM Java SDK updates in October 2023. Vulnerability Details CVEID:CVE-2023-22081 DESCRIPTION: An unspecifie...

Security Bulletin: IBM® Db2® is vulnerable to a privilege escalation to SYSTEM user via MSI repair functionality on Windows (CVE-2023-47145)

Summary IBM® Db2® is vulnerable to a privilege escalation to SYSTEM user via MSI repair functionality on Windows. Vulnerability Details CVEID:CVE-2023-47145 DESCRIPTION: IBM Db2 for Windows includes Db2 Connect Server could allow a local user to escalate their privileges to the SYSTEM user using...

IBM Db2 Denial of Service Vulnerability (CNVD-2025-03030)

IBM Db2 is a relational database management system from International Business Machines IBM. The system's execution environments are mainly UNIX, Linux, IBMi, z/OS, and Windows server versions. A denial of service vulnerability exists in IBM Db2, which can be exploited by an attacker to cause a...

IBM Db2 Denial of Service Vulnerability (CNVD-2025-03031)

IBM Db2 is a relational database management system from International Business Machines IBM. The system's execution environments are mainly UNIX, Linux, IBMi, z/OS, and Windows server versions. A denial of service vulnerability exists in IBM Db2, which can be exploited by an attacker to cause a...

IBM Db2 Denial of Service Vulnerability (CNVD-2025-03028)

IBM Db2 is a relational database management system from International Business Machines IBM. The system's execution environments are mainly UNIX, Linux, IBMi, z/OS, and Windows server versions. A denial of service vulnerability exists in IBM Db2, which can be exploited by an attacker to cause a...