Skip to content
OpenAdvisories
High · 7.5 CVE-2023-26021 EUVD-2023-29908GHSA-4433-37fm-3jq5

IBM Db2 denial of service

Published Apr 28, 2023 · Updated Feb 13, 2025 · Assigned by ibm

Description

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 is vulnerable to a denial of service as the server may crash when compiling a specially crafted SQL query using a LIMIT clause. IBM X-Force ID: 247864.

Affected products

VendorProductAffectedFixed
IBM DB2 for Linux, UNIX and Windows 11.1, 11.5 —

Advisories 1

References