Medium · 5.3 CVE-2023-30987 EUVD-2023-35325GHSA-7cq2-v5ph-5463

IBM Db2 denial of service

Published Oct 16, 2023 · Updated Feb 13, 2025 · Assigned by ibm

Vendor: IBM Product: DB2 for Linux, UNIX and Windows Platform: Linux Platform: Windows

Description

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on certain databases. IBM X-Force ID: 253440.

Affected products

Vendor	Product	Affected	Fixed
IBM	Db2 for Linux, UNIX and Windows	10.5, 11.1 ,11.5	—

References

https://www.ibm.com/support/pages/node/7047560 vendor-advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/253440 vdb-entry
https://security.netapp.com/advisory/ntap-20231116-0006/