Skip to content
OpenAdvisories
Medium WID-SEC-2023-2823 1 CVE

IBM DB2: Schwachstelle ermöglicht Offenlegung von Informationen

Published Nov 5, 2023 · Updated Nov 5, 2023 · de-DE

Vendor: IBM Product: Db2 Product: DB2 < 10.5 FP11 Product: DB2 < 11.1.4 FP7 Product: DB2 < 11.5.0 Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in IBM DB2 ausnutzen, um Informationen offenzulegen.

Product

IBM DB2 ist ein relationales Datenbanksystem (RDBS) von IBM.

Vulnerabilities 1

  • High 7.5
    CVE-2023-32342

    IBM GSKit information disclosure

    IBM GSKit could allow a remote attacker to obtain sensitive information, caused by a timing-based side channel in the RSA Decryption implementation. By sending an overly large number of trial messages for decryption, an attacker could exploit this vulnerabili…

    IBM GSKit

Revision history

  1. #1

    Initiale Fassung

References