Medium · 6.5 CVE-2022-35637 EUVD-2022-38518GHSA-jjf2-77hr-45w8

IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to a denial of service after entering a malformed SQL sta…

Published Sep 13, 2022 · Updated Sep 16, 2024 · Assigned by ibm

Vendor: IBM Product: DB2 for Linux, UNIX and Windows Platform: Linux Platform: Windows

Description

IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to a denial of service after entering a malformed SQL statement into the Db2expln tool. IBM X-Force ID: 230823.

Affected products

Vendor	Product	Affected	Fixed
IBM	DB2 for Linux, UNIX and Windows	10.5, 11.1, 11.5	—

References

https://www.ibm.com/support/pages/node/6618775
ibm-db2-cve202235637-dos (230823) vdb-entry
https://security.netapp.com/advisory/ntap-20230921-0003/