Lucene search

IbmVULNRICHMENT:CVE-2023-40372

HistoryOct 16, 2023 - 11:02 p.m.

CVE-2023-40372 IBM Db2 denial of service

2023-10-1623:02:30

CWE-20

ibm

github.com

ibm

db2

denial of service

vulnerability

cve-2023-40372

linux

unix

windows

external tables

x-force id

263499

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

7.5

Confidence

High

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 is vulnerable to denial of service with a specially crafted SQL statement using External Tables. IBM X-Force ID: 263499.

References

exchange.xforce.ibmcloud.com/vulnerabilities/263499

security.netapp.com/advisory/ntap-20231116-0007/

www.ibm.com/support/pages/node/7047561

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

7.5

Confidence

High

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

Related for VULNRICHMENT:CVE-2023-40372