CVE-2023-38740

IBM Db2 for Linux, UNIX, and Windows (includes Db2 Connect Server) 11.5 is vulnerable to a denial of service with a specially crafted SQL statement. IBM X-Force ID: 262613.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:ibm:db2:*:*:*:*:*:*:*:*
OR cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
cpe:2.3:o:opengroup:unix:-:*:*:*:*:*:*:*

History

22 Dec 2023, 21:08

Type Values Removed Values Added
References () https://security.netapp.com/advisory/ntap-20231116-0007/ - () https://security.netapp.com/advisory/ntap-20231116-0007/ - Third Party Advisory

16 Nov 2023, 16:15

Type Values Removed Values Added
References
  • () https://security.netapp.com/advisory/ntap-20231116-0007/ -

19 Oct 2023, 14:34

Type Values Removed Values Added
References
  • (MISC) https://www.ibm.com/support/pages/node/7047554 - Patch, Vendor Advisory
References (MISC) https://www.ibm.com/support/pages/node/7047489 - (MISC) https://www.ibm.com/support/pages/node/7047489 - Not Applicable
References (MISC) https://exchange.xforce.ibmcloud.com/vulnerabilities/262613 - (MISC) https://exchange.xforce.ibmcloud.com/vulnerabilities/262613 - VDB Entry, Vendor Advisory
CWE NVD-CWE-noinfo
CPE cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:opengroup:unix:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:*:*:*:*:*:*:*:*
First Time Ibm db2
Linux
Opengroup
Microsoft
Microsoft windows
Ibm
Opengroup unix
Linux linux Kernel
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.5

16 Oct 2023, 22:15

Type Values Removed Values Added
New CVE

Information

Published : 2023-10-16 22:15

Updated : 2023-12-22 21:08


NVD link : CVE-2023-38740

Mitre link : CVE-2023-38740

CVE.ORG link : CVE-2023-38740


JSON object : View

Products Affected

linux

  • linux_kernel

ibm

  • db2

microsoft

  • windows

opengroup

  • unix
CWE
NVD-CWE-noinfo CWE-20

Improper Input Validation