7.5

CVE-2023-40692

IBM Db2 denial of service

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, 11.5 is vulnerable to denial of service under extreme stress conditions.  IBM X-Force ID:  264807.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Db2 Version10.5 SwPlatformlinux
Ibm ≫ Db2 Version10.5 SwPlatformunix
Ibm ≫ Db2 Version10.5 SwPlatformwindows
Ibm ≫ Db2 Version11.1 SwPlatformlinux
Ibm ≫ Db2 Version11.1 SwPlatformunix
Ibm ≫ Db2 Version11.1 SwPlatformwindows
Ibm ≫ Db2 Version11.5 SwPlatformlinux
Ibm ≫ Db2 Version11.5 SwPlatformunix
Ibm ≫ Db2 Version11.5 SwPlatformwindows
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.06% 0.184
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
psirt@us.ibm.com 5.9 2.2 3.6
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.