Skip to content
OpenAdvisories
Medium WID-SEC-2024-3457 5 CVEs

IBM DB2: Mehrere Schwachstellen

Published Nov 13, 2024 · Updated Jan 25, 2026 · Revision 5 · de-DE

Vendor: HCL Software Vendor: IBM Product: Commerce Product: Db2 Product: Tivoli Key Lifecycle Manager Platform: Linux

Summary

Ein entfernter oder lokaler authentifizierter Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen oder vertrauliche Informationen offenzulegen.

Product

IBM DB2 ist ein relationales Datenbanksystem (RDBS) von IBM.

Vulnerabilities 5

  • Medium 6.5
    CVE-2024-45663

    IBM Db2 denial of service

    IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1, 11.5, and 12.1 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query.

    IBM DB2 for Linux, UNIX and Windows Linux Windows
  • Medium 5.5
    CVE-2024-40679

    IBM Db2 information disclosure

    IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 is vulnerable to an information disclosure vulnerability as sensitive information may be included in a log file under specific conditions.

    IBM Db2
  • Medium 5.3
    CVE-2024-37071

    IBM Db2 denial of service

    IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 could allow an authenticated user to cause a denial of service with a specially crafted query due to improper memory allocation.

    IBM DB2 for Linux, UNIX and Windows Linux Windows
  • Medium 5.3
    CVE-2024-41761

    IBM Db2 denial of service

    IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query.

    IBM DB2 for Linux, UNIX and Windows Linux Windows
  • Medium 5.3
    CVE-2024-41762

    IBM Db2 denial of service

    IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query.

    IBM DB2 for Linux, UNIX and Windows Linux Windows

Revision history

  1. #5

    Neue Updates von IBM aufgenommen

  2. #4

    Neue Updates von IBM aufgenommen

  3. #3

    Neue Updates von IBM aufgenommen

  4. #2

    Neue Updates von HCL aufgenommen

  5. #1

    Initiale Fassung

References