CVE-2023-30446

Summary

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on certain tables. IBM X-Force ID:

253361

.

Affected Software

Weaknesses

• CWE-20: CWE-20 Improper Input Validation

ADP Enrichment

CVE Program Container

Additional References

• https://www.ibm.com/support/pages/node/7010557
• https://exchange.xforce.ibmcloud.com/vulnerabilities/253361
• https://security.netapp.com/advisory/ntap-20230731-0007/

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://www.ibm.com/support/pages/node/7010557
• https://exchange.xforce.ibmcloud.com/vulnerabilities/253361
• https://security.netapp.com/advisory/ntap-20230731-0007/

• ←Previous
• Next→