Medium · 5.3 CVE-2023-38728 EUVD-2023-42503GHSA-pr32-36pm-7395

IBM Db2 denial of service

Published Oct 16, 2023 · Updated Feb 13, 2025 · Assigned by ibm

Vendor: IBM Product: DB2 for Linux, UNIX and Windows Platform: Linux Platform: Windows

Description

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted XML query statement. IBM X-Force ID: 262258.

Affected products

Vendor	Product	Affected	Fixed
IBM	Db2 for Linux, UNIX and Windows	10.5, 11.1 ,11.5	—

References

https://www.ibm.com/support/pages/node/7047489 vendor-advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/262258 vdb-entry
https://security.netapp.com/advisory/ntap-20231116-0006/