CVE-2023-38003

CVE-2023-38003 – IBM Db2 privilege escalation : A user with DATAACCESS privileges could execute routines they should not access in Db2 for Linux/UNIX/Windows (Db2 Connect Server) 10.5, 11.1, 11.5. The IBM X-Force advisory reports a base score of 7.2 (HIGH) with network attack vector and high impa...

CVE-2023-46167

CVE-2023-46167 affects IBM Db2 for Linux, UNIX and Windows (including Db2 Connect Server) 11.5 federated server. The issue is a denial of service when a specially crafted cursor is used. Basic details in IBM X-Force/IBM advisories align with a DoS vector via a crafted cursor in federated queries;...

CVE-2023-46167 IBM Db2 denial of service

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 11.5 federated server is vulnerable to a denial of service when a specially crafted cursor is used. IBM X-Force ID: 269367...

Vulnerabilities fixed in IBM DB2

IBM has fixed vulnerabilities in DB2. A malicious party could exploit the exploit the vulnerabilities to grant himself elevated privileges, or to cause a denial-of-service by executing a specially prepared query. These updates also include several updates to third-party products to include older...

IBM Db2 输入验证错误漏洞

IBM Db2 is a relational database management system from International Business Machines IBM. The system's execution environments are mainly UNIX, Linux, IBMi, z/OS, and Windows server versions. IBM Db2 suffers from an input validation error vulnerability that stems from susceptibility to denial o...

IBM Db2 输入验证错误漏洞

IBM Db2 is a relational database management system from International Business Machines IBM. The system's execution environments are mainly UNIX, Linux, IBMi, z/OS, and Windows server versions. IBM Db2 suffers from an input validation error vulnerability that originates from allowing an attacker ...

CVE-2023-40692 IBM Db2 denial of service

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5, 11.1, 11.5 is vulnerable to denial of service under extreme stress conditions. IBM X-Force ID: 264807...

CVE-2023-40692 IBM Db2 denial of service

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5, 11.1, 11.5 is vulnerable to denial of service under extreme stress conditions. IBM X-Force ID: 264807...

CVE-2023-40692

CVE-2023-40692 affects IBM Db2 for Linux, UNIX and Windows (including Db2 Connect Server) 10.5, 11.1, and 11.5. The vulnerability allows a denial of service under extreme stress due to uncontrolled resource consumption (CWE-400). Public references (IBM X-Force ID: 264807) confirm the DoS impact; ...

CVE-2023-45178

IBM Db2 for Linux, UNIX and Windows includes DB2 Connect Server 11.5 CLI is vulnerable to a denial of service when a specially crafted request is used. IBM X-Force ID: 268073...

CVE-2023-45178

IBM Db2 for Linux, UNIX and Windows includes DB2 Connect Server 11.5 CLI is vulnerable to a denial of service when a specially crafted request is used. IBM X-Force ID: 268073...

Design/Logic Flaw

IBM Db2 for Linux, UNIX and Windows includes DB2 Connect Server 11.5 CLI is vulnerable to a denial of service when a specially crafted request is used. IBM X-Force ID: 268073...

CVE-2023-45178 IBM Db2 denial of service

IBM Db2 for Linux, UNIX and Windows includes DB2 Connect Server 11.5 CLI is vulnerable to a denial of service when a specially crafted request is used. IBM X-Force ID: 268073...

CVE-2023-45178

CVE-2023-45178 affects IBM Db2 for Linux, UNIX and Windows (including DB2 Connect Server) 11.5 CLI. Description: vulnerability to denial of service when a specially crafted request is used. Root cause: CWE-20 Improper Input Validation. Evidence: IBM X-Force entry for the CVE-2023-45178 shows a ba...

IBM Db2 Input Validation Error Vulnerability

IBM Db2 is a relational database management system from International Business Machines IBM. The system is implemented in UNIX, Linux, IBMi, z/OS, and Windows server versions. IBM Db2 suffers from an input validation error vulnerability that stems from a susceptibility to denial of service attack...

Security Bulletin: Multiple vulnerabilities in DB2 JDBC driver affect IBM Tivoli Netcool Impact

Summary DB2 JDBC driver is shipped with IBM Tivoli Netcool Impact as part of the db2 data source adapter. Information about security vulnerabilities affecting DB2 JDBC driver has been published in a security bulletin. Vulnerability Details CVEID:CVE-2023-27869 DESCRIPTION: IBM Db2 JDBC Driver for...

PT-2023-7415 · Ibm · Ibm Db2

Name of the Vulnerable Software and Affected Versions: IBM Db2 for Linux, UNIX and Windows includes DB2 Connect Server version 11.5 CLI Description: The issue is related to insufficient input validation in the database management system, which can be exploited by a remote attacker to cause a deni...

PT-2023-7414 · Ibm · Ibm Db2

Name of the Vulnerable Software and Affected Versions: IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server versions 10.5, 11.1, 11.5 Description: The issue is related to an uncontrolled consumption of resources, which can lead to a denial of service under extreme stress conditions. Th...

PT-2023-7700 · Ibm · Ibm Db2

Name of the Vulnerable Software and Affected Versions: IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server versions 10.5, 11.1, and 11.5 Description: The issue is related to insufficient access control in the IBM DB2 database management system. Exploitation of this issue could allow a...

PT-2023-7699 · Ibm · Ibm Db2

Name of the Vulnerable Software and Affected Versions: IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server versions 10.5, 11.1, and 11.5 Description: The issue exists due to insufficient input validation in the system, allowing a remote attacker to cause a denial of service with a...