CVE-2023-26022

Summary

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) is vulnerable to a denial of service as the server may crash when an Out of Memory occurs using the DBMS_OUTPUT module. IBM X-Force ID: 247868.

Affected Software

Weaknesses

• CWE-20: CWE-20 Improper Input Validation

ADP Enrichment

CVE Program Container

Additional References

• https://www.ibm.com/support/pages/node/6985669
• https://exchange.xforce.ibmcloud.com/vulnerabilities/247868
• https://security.netapp.com/advisory/ntap-20230511-0010/

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://www.ibm.com/support/pages/node/6985669
• https://exchange.xforce.ibmcloud.com/vulnerabilities/247868
• https://security.netapp.com/advisory/ntap-20230511-0010/

• ←Previous
• Next→