CVE-2023-27869

CVE-2023-27869 affects IBM Db2 JDBC Driver for Db2 on Linux/UNIX/Windows (versions 10.5, 11.1, 11.5). The issue is caused by an unchecked logger injection via the named traceFile property, enabling a remote authenticated attacker to execute arbitrary code on the system. IBM bulletins list this al...

CVE-2023-27869 IBM Db2 code execution

IBM Db2 JDBC Driver for Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an unchecked logger injection. By sending a specially crafted request using the named traceFile property, an attacker could...

CVE-2023-27869 IBM Db2 code execution

IBM Db2 JDBC Driver for Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an unchecked logger injection. By sending a specially crafted request using the named traceFile property, an attacker could...

CVE-2023-30449 IBM Db2 denial of service

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query. IBM X-Force ID: 253439...

CVE-2023-30449 IBM Db2 denial of service

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query. IBM X-Force ID: 253439...

CVE-2023-30449

CVE-2023-30449 affects IBM Db2 for Linux, UNIX and Windows (including Db2 Connect Server) versions 10.5, 11.1, and 11.5, with denial of service via a specially crafted query. Connected documents confirm this CVE across multiple IBM bulletins and advisories (Cloud Pak System/Data, Db2 Big SQL, Ope...

CVE-2023-30445 IBM Db2 denial of service

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on certain tables. IBM X-Force ID: 253357...

CVE-2023-30445 IBM Db2 denial of service

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on certain tables. IBM X-Force ID: 253357...

CVE-2023-30445

CVE-2023-30445 affects IBM Db2 for Linux, UNIX and Windows (incl. Db2 Connect Server) 10.5, 11.1 and 11.5. The vulnerability allows denial of service via a specially crafted query on certain tables. Affected products shown in connected sources include multiple IBM bulletins and Red Hat references...

CVE-2023-30448 IBM Db2 denial of service

IBM DB2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on certain tables. IBM X-Force ID: 253437...

CVE-2023-30448 IBM Db2 denial of service

IBM DB2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on certain tables. IBM X-Force ID: 253437...

CVE-2023-30448

CVE-2023-30448 affects IBM Db2 for Linux, UNIX and Windows (including Db2 Connect Server) versions 10.5, 11.1, and 11.5. The vulnerability allows denial of service via a specially crafted query on certain tables. Connected sources corroborate the DoS impact and tie it to multiple IBM Db2 componen...

CVE-2023-30446 IBM Db2 denial of service

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on certain tables. IBM X-Force ID: 253361...

CVE-2023-30446 IBM Db2 denial of service

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on certain tables. IBM X-Force ID: 253361...

CVE-2023-30446

CVE-2023-30446 affects IBM Db2 for Linux, UNIX and Windows (including Db2 Connect Server) across 10.5, 11.1, and 11.5. The vulnerability allows a denial of service via a specially crafted query on certain tables. The available connected sources confirm the DoS impact but do not describe a specifi...

CVE-2023-30447 IBM Db2 denial of service

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on certain tables. IBM X-Force ID: 253436...

CVE-2023-30447 IBM Db2 denial of service

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on certain tables. IBM X-Force ID: 253436...

CVE-2023-30447

CVE-2023-30447 and related IBM Db2 vulnerabilities affect IBM Db2 for Linux, UNIX and Windows (including Db2 Connect Server) 10.5, 11.1, 11.5 with denial of service via specially crafted queries on specific tables/objects. Connected sources show multiple CVEs (e.g., 30446, 30443, 30448, 30445, 30...

PT-2023-5225

Name of the Vulnerable Software and Affected Versions IBM Db2 JDBC Driver for Db2 for Linux, UNIX and Windows versions 10.5, 11.1, and 11.5 Description The issue is related to incorrect code generation management in the IBM DB2 JDBC driver, which could allow a remote authenticated attacker to...

CVE-2023-30447: Improper Input Validation

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on certain tables. IBM X-Force ID: 253436...