7.5

CVE-2023-38740

IBM Db2 denial of service

IBM Db2 for Linux, UNIX, and Windows (includes Db2 Connect Server) 11.5 is vulnerable to a denial of service with a specially crafted SQL statement.  IBM X-Force ID:  262613.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Db2 Version >= 11.5 <= 11.5.8
   Linux ≫ Linux Kernel Version-
   Microsoft ≫ Windows Version-
   Opengroup ≫ Unix Version-
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.78% 0.512
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
psirt@us.ibm.com 5.3 1.6 3.6
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://www.ibm.com/support/pages/node/7047489
Not Applicable
https://exchange.xforce.ibmcloud.com/vulnerabilities/262613
Vendor Advisory
VDB Entry
https://security.netapp.com/advisory/ntap-20231116-0007/
Third Party Advisory
https://www.ibm.com/support/pages/node/7047554
Patch
Vendor Advisory