Skip to content
OpenAdvisories
High WID-SEC-2023-3052 3 CVEs

IBM Informix: Mehrere Schwachstellen

Published Dec 4, 2023 · Updated Feb 27, 2025 · Revision 2 · de-DE

Vendor: IBM Product: Cognos Analytics Product: Informix Platform: Linux Platform: Windows

Summary

Ein entfernter Angreifer kann mehrere Schwachstellen in IBM Informix ausnutzen, um beliebigen Code auszuführen oder vertrauliche Informationen offenzulegen.

Product

IBM Informix ist ein Datenbankmanagementsystem (DBMS) von IBM.

Vulnerabilities 3

  • High 8.4
    CVE-2023-28523

    IBM Informix Dynamic Server buffer overflow

    IBM Informix Dynamic Server 12.10 and 14.10 onsmsync is vulnerable to a heap buffer overflow, caused by improper bounds checking which could allow an attacker to execute arbitrary code. IBM X-Force ID: 250753.

    IBM Informix Dynamic Server
  • Medium 6.2
    CVE-2023-28526

    IBM Informix Dynamic Server buffer overflow

    IBM Informix Dynamic Server 12.10 and 14.10 archecker is vulnerable to a heap buffer overflow, caused by improper bounds checking which could allow a local user to cause a segmentation fault. IBM X-Force ID: 251204.

    IBM Informix Dynamic Server
  • Medium 6.2
    CVE-2023-28527

    IBM Informix Dynamic Server buffer overflow

    IBM Informix Dynamic Server 12.10 and 14.10 cdr is vulnerable to a heap buffer overflow, caused by improper bounds checking which could allow a local user to cause a segmentation fault. IBM X-Force ID: 251206.

    IBM Informix Dynamic Server

Revision history

  1. #2

    Neue Updates von IBM aufgenommen

  2. #1

    Initiale Fassung

References