Design/Logic Flaw

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query. IBM X-Force ID: 266166...

CVE-2023-29258 IBM Db2 denial of service

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 11.1, and 11.5 is vulnerable to a denial of service through a specially crafted federated query on specific federation objects. IBM X-Force ID: 252048...

CVE-2023-29258

CVE-2023-29258: IBM Db2 for Linux, UNIX and Windows (including Db2 Connect Server) 11.1 and 11.5 is vulnerable to a denial of service via a specially crafted federated query on specific federation objects. Root cause cited across connected docs is improper input handling leading to DoS; impact is...

CVE-2023-40687 IBM Db2 denial of service

IBM DB2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted RUNSTATS command on an 8TB table. IBM X-Force ID: 264809...

CVE-2023-40687

CVE-2023-40687 affects IBM Db2 for Linux, UNIX and Windows (incl. Db2 Connect Server) 10.5, 11.1, 11.5, enabling denial of service via a specially crafted RUNSTATS command on an 8TB table. Public docs confirm the issue and its IBM X-Force ID (264809). The provided connected materials indicate a r...

CVE-2023-38727

CVE-2023-38727 affects IBM Db2 for Linux/UNIX/Windows (10.5, 11.1, 11.5) including Db2 Connect Server. The vulnerability allows a denial of service via a specially crafted SQL statement. IBM X-Force ID: 262257. CVSS v3.1 base score 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). The connected IBM bull...

CVE-2023-38727 IBM Db2 denial of service

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted SQL statement. IBM X-Force ID: 262257...

CVE-2023-38727 IBM Db2 denial of service

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted SQL statement. IBM X-Force ID: 262257...

CVE-2023-47701 IBM Db2 denial of service

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query. IBM X-Force ID: 266166...

CVE-2023-47701

CVE-2023-47701 affects IBM Db2 for Linux, UNIX and Windows (including Db2 Connect Server) versions 10.5, 11.1 and 11.5. Affected: an authenticated user with CONNECT privileges could cause a denial of service via a specially crafted query. IBM Db2-related security bulletins (including IBM Cloud Pa...

CVE-2023-40692

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5, 11.1, 11.5 is vulnerable to denial of service under extreme stress conditions. IBM X-Force ID: 264807...

CVE-2023-40692

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5, 11.1, 11.5 is vulnerable to denial of service under extreme stress conditions. IBM X-Force ID: 264807...

Design/Logic Flaw

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5, 11.1, 11.5 is vulnerable to denial of service under extreme stress conditions. IBM X-Force ID: 264807...

CVE-2023-38003 IBM Db2 command execution

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5, 11.1, and 11.5 could allow a user with DATAACCESS privileges to execute routines that they should not have access to. IBM X-Force ID: 260214...

CVE-2023-38003 IBM Db2 command execution

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5, 11.1, and 11.5 could allow a user with DATAACCESS privileges to execute routines that they should not have access to. IBM X-Force ID: 260214...

CVE-2023-38003

CVE-2023-38003 – IBM Db2 privilege escalation : A user with DATAACCESS privileges could execute routines they should not access in Db2 for Linux/UNIX/Windows (Db2 Connect Server) 10.5, 11.1, 11.5. The IBM X-Force advisory reports a base score of 7.2 (HIGH) with network attack vector and high impa...

CVE-2023-46167

CVE-2023-46167 affects IBM Db2 for Linux, UNIX and Windows (including Db2 Connect Server) 11.5 federated server. The issue is a denial of service when a specially crafted cursor is used. Basic details in IBM X-Force/IBM advisories align with a DoS vector via a crafted cursor in federated queries;...

CVE-2023-46167 IBM Db2 denial of service

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 11.5 federated server is vulnerable to a denial of service when a specially crafted cursor is used. IBM X-Force ID: 269367...

Vulnerabilities fixed in IBM DB2

IBM has fixed vulnerabilities in DB2. A malicious party could exploit the exploit the vulnerabilities to grant himself elevated privileges, or to cause a denial-of-service by executing a specially prepared query. These updates also include several updates to third-party products to include older...

IBM Db2 输入验证错误漏洞

IBM Db2 is a relational database management system from International Business Machines IBM. The system's execution environments are mainly UNIX, Linux, IBMi, z/OS, and Windows server versions. IBM Db2 suffers from an input validation error vulnerability that stems from susceptibility to denial o...