Skip to content
OpenAdvisories
High WID-SEC-2024-0766 7 CVEs

IBM DB2: Mehrere Schwachstellen

Published Apr 2, 2024 · Updated May 20, 2024 · Revision 4 · de-DE

Vendor: IBM Product: Db2 Product: License Metric Tool Product: Security Guardium Platform: Linux Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um einen Denial of Service Angriff durchzuführen, Informationen offenzulegen oder beliebigen Programmcode auszuführen.

Product

IBM DB2 ist ein relationales Datenbanksystem (RDBS) von IBM.

Vulnerabilities 7

  • Medium 6.8
    CVE-2023-38729

    IBM Db2 information disclosure

    IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to sensitive information disclosure when using ADMIN_CMD with IMPORT or EXPORT.

    IBM DB2 for Linux, UNIX and Windows Linux Windows
  • Medium 6.2
    CVE-2024-25030

    IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 stores potentially sensitive information in log …

    IBM DB2 for Linux, UNIX and Windows Linux Windows
  • Medium 5.3
    CVE-2023-52296

    IBM Db2 for Linux, UNIX and Windows denial of service

    IBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 is vulnerable to denial of service when querying a specific UDF built-in function concurrently. IBM X-Force ID: 278547.

    IBM DB2 for Linux, UNIX and Windows Linux Windows
  • Medium 5.3
    CVE-2024-22360

    IBM Db2 for Linux, UNIX and Windows denial of service

    IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 is vulnerable to a denial of service with a specially crafted query on certain columnar tables. IBM X-Force ID: 280905.

    IBM DB2 for Linux, UNIX and Windows Linux Windows
  • Medium 5.3
    CVE-2024-25046

    IBM Db2 for Linux, UNIX and Windows denial of service

    IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 is vulnerable to a denial of service by an authenticated user using a specially crafted query. IBM X-Force ID: 282953.

    IBM DB2 for Linux, UNIX and Windows Linux Windows
  • Medium 5.3
    CVE-2024-27254

    IBM Db2 for Linux, UNIX and Windows denial of service

    IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.5, 11.1, and 11.5 federated server is vulnerable to denial of service with a specially crafted query under certain conditions. IBM X-Force ID: 283813.

    IBM DB2 for Linux, UNIX and Windows Linux Windows
  • Unscored —
    CVE-2012-2677

    Integer overflow in the ordered_malloc function in boost/pool/pool.hpp in Boost Pool before 3.9 makes it easier for con…

    mysql ceph Azure Linux

Revision history

  1. #4

    Neue Updates von IBM aufgenommen

  2. #3

    Neue Updates von IBM aufgenommen

  3. #2

    Neue Updates von IBM aufgenommen

  4. #1

    Initiale Fassung

References