CVE-2023-28527

IBM Informix Dynamic Server 12.10 and 14.10 cdr is vulnerable to a heap buffer overflow, caused by improper bounds checking which could allow a local user to cause a segmentation fault. IBM X-Force ID: 251206.
References
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ibm:informix_dynamic_server:12.10:-:*:*:-:*:*:*
cpe:2.3:a:ibm:informix_dynamic_server:14.10:*:*:*:*:*:*:*
cpe:2.3:a:ibm:informix_dynamic_server_on_cloud_pak_for_data:*:*:*:*:*:*:*:*

History

12 Dec 2023, 21:05

Type Values Removed Values Added
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/251206 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/251206 - VDB Entry, Vendor Advisory
References () https://www.ibm.com/support/pages/node/7070188 - () https://www.ibm.com/support/pages/node/7070188 - Vendor Advisory
First Time Ibm
Ibm informix Dynamic Server
Ibm informix Dynamic Server On Cloud Pak For Data
CWE CWE-787
CVSS v2 : unknown
v3 : 6.2
v2 : unknown
v3 : 5.5
CPE cpe:2.3:a:ibm:informix_dynamic_server:14.10:*:*:*:*:*:*:*
cpe:2.3:a:ibm:informix_dynamic_server_on_cloud_pak_for_data:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:informix_dynamic_server:12.10:-:*:*:-:*:*:*
Summary
  • (es) IBM Informix Dynamic Server 12.10 y 14.10 cdr es vulnerable a un desbordamiento de búfer de almacenamiento dinámico, causado por una verificación de los límites incorrecta que podría permitir que un usuario local cause un error de segmentación. ID de IBM X-Force: 251206.

09 Dec 2023, 03:15

Type Values Removed Values Added
New CVE

Information

Published : 2023-12-09 03:15

Updated : 2023-12-12 21:05


NVD link : CVE-2023-28527

Mitre link : CVE-2023-28527

CVE.ORG link : CVE-2023-28527


JSON object : View

Products Affected

ibm

  • informix_dynamic_server
  • informix_dynamic_server_on_cloud_pak_for_data
CWE
CWE-787

Out-of-bounds Write

CWE-122

Heap-based Buffer Overflow