Medium · 5.3 CVE-2023-40373 EUVD-2023-44944GHSA-cgwh-288c-f28p

IBM Db2 denial of service

Published Oct 16, 2023 · Updated Feb 13, 2025 · Assigned by ibm

Vendor: IBM Product: DB2 for Linux, UNIX and Windows Platform: Linux Platform: Windows

Description

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) is vulnerable to denial of service with a specially crafted query containing common table expressions. IBM X-Force ID: 263574.

Affected products

Vendor	Product	Affected	Fixed
IBM	Db2 for Linux, UNIX and Windows	10.5, 11.1, 11.5	—

References

https://www.ibm.com/support/pages/node/7047563 vendor-advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/263574 vdb-entry
https://security.netapp.com/advisory/ntap-20231116-0006/