Skip to content
OpenAdvisories
Medium WID-SEC-2023-1065 7 CVEs

IBM DB2: Mehrere Schwachstellen

Published Apr 24, 2023 · Updated Jun 29, 2023 · Revision 3 · de-DE

Vendor: IBM Product: Db2 Product: DB2 < 10.5 FP11 Product: DB2 < 11.1.4 FP7 Product: DB2 < 11.5.7 Product: DB2 < 11.5.8 Product: License Metric Tool 9.2 Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um einen Denial of Service Angriff durchzuführen und beliebigen Code auszuführen.

Product

IBM DB2 ist ein relationales Datenbanksystem (RDBS) von IBM.

Vulnerabilities 7

  • High 7.5
    CVE-2023-26021

    IBM Db2 denial of service

    IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 is vulnerable to a denial of service as the server may crash when compiling a specially crafted SQL query using a LIMIT clause. IBM X-Force ID: 247864.

    IBM DB2 for Linux, UNIX and Windows Linux Windows
  • High 7.5
    CVE-2023-29255

    IBM DB2 for Linux, UNIX and Windows denial of service

    IBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to a denial of service as it may trap when compiling a variation of an anonymous block. IBM X-Force ID: 251991.

    IBM DB2 for Linux, UNIX and Windows Linux Windows
  • High 7.2
    CVE-2023-29257

    IBM Db2 code execution

    IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to remote code execution as a database administrator of one database may execute code or read/write files from another database within the same instance. IBM …

    IBM DB2 for Linux, UNIX and Windows Linux Windows
  • Medium 5.9
    CVE-2023-25930

    IBM Db2 denial of service

    IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.1, 11.1, and 11.5 is vulnerable to a denial of service. Under rare conditions, setting a special register may cause the Db2 server to terminate abnormally. IBM X-Force ID: 247862.

    IBM DB2 for Linux, UNIX and Windows Linux Windows
  • Medium 5.9
    CVE-2023-26022

    IBM Db2 denial of service

    IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) is vulnerable to a denial of service as the server may crash when an Out of Memory occurs using the DBMS_OUTPUT module. IBM X-Force ID: 247868.

    IBM DB2 for Linux, UNIX and Windows Linux Windows
  • Medium 5.3
    CVE-2023-27559

    IBM Db2 denial of service

    IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to a denial of service as the server may crash when using a specially crafted subquery. IBM X-Force ID: 249196.

    IBM DB2 for Linux, UNIX and Windows Linux Windows
  • Medium 5.1
    CVE-2023-27555

    IBM Db2 denial of service

    IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5 is vulnerable to a denial of service when attempting to use ACR client affinity for unfenced DRDA federation wrappers. IBM X-Force ID: 249187.

    IBM DB2 for Linux, UNIX and Windows Linux Windows

Revision history

  1. #3

    Neue Updates von IBM aufgenommen

  2. #2

    Neue Updates von IBM aufgenommen

  3. #1

    Initiale Fassung

References