Skip to content
OpenAdvisories
Medium WID-SEC-2023-3048 8 CVEs

IBM DB2: Mehrere Schwachstellen

Published Dec 3, 2023 · Updated Jan 25, 2026 · Revision 9 · de-DE

Vendor: HCL Software Vendor: IBM Product: Commerce Product: Db2 Product: License Metric Tool Product: Security Guardium Product: Tivoli Business Service Manager Product: Tivoli Key Lifecycle Manager Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um einen Denial of Service Angriff durchzuführen oder beliebigen Programmcode auszuführen.

Product

IBM DB2 ist ein relationales Datenbanksystem (RDBS) von IBM.

Vulnerabilities 8

  • High 7.2
    CVE-2023-38003

    IBM Db2 command execution

    IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 could allow a user with DATAACCESS privileges to execute routines that they should not have access to. IBM X-Force ID: 260214.

    IBM DB2 for Linux, UNIX and Windows Linux Windows
  • Medium 6.5
    CVE-2023-45178

    IBM Db2 denial of service

    IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5 CLI is vulnerable to a denial of service when a specially crafted request is used. IBM X-Force ID: 268073.

    IBM DB2 for Linux, UNIX and Windows Linux Windows
  • Medium 6.5
    CVE-2023-47701

    IBM Db2 denial of service

    IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query. IBM X-Force ID: 266166.

    IBM DB2 for Linux, UNIX and Windows Linux Windows
  • Medium 5.9
    CVE-2023-40692

    IBM Db2 denial of service

    IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, 11.5 is vulnerable to denial of service under extreme stress conditions. IBM X-Force ID: 264807.

    IBM DB2 for Linux, UNIX and Windows Linux Windows
  • Medium 5.9
    CVE-2023-46167

    IBM Db2 denial of service

    IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 federated server is vulnerable to a denial of service when a specially crafted cursor is used. IBM X-Force ID: 269367.

    IBM DB2 for Linux, UNIX and Windows Linux Windows
  • Medium 5.3
    CVE-2023-29258

    IBM Db2 denial of service

    IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1, and 11.5 is vulnerable to a denial of service through a specially crafted federated query on specific federation objects. IBM X-Force ID: 252048.

    IBM DB2 for Linux, UNIX and Windows Linux Windows
  • Medium 5.3
    CVE-2023-38727

    IBM Db2 denial of service

    IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted SQL statement. IBM X-Force ID: 262257.

    IBM DB2 for Linux, UNIX and Windows Linux Windows
  • Medium 5.3
    CVE-2023-40687

    IBM Db2 denial of service

    IBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted RUNSTATS command on an 8TB table. IBM X-Force ID: 264809.

    IBM DB2 for Linux, UNIX and Windows Linux Windows

Revision history

  1. #9

    Neue Updates von IBM aufgenommen

  2. #8

    Neue Updates von HCL aufgenommen

  3. #7

    Neue Updates von IBM und IBM-APAR aufgenommen

  4. #6

    Neue Updates von IBM aufgenommen

  5. #5

    Neue Updates von IBM aufgenommen

  6. #4

    Neue Updates von IBM aufgenommen

  7. #3

    Neue Updates von IBM aufgenommen

  8. #2

    doppelten Eintrag entfernt

  9. #1

    Initiale Fassung

References