CVE-2024-28762

Summary

IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query under certain conditions. IBM X-Force ID: 285246.

Affected Software

Weaknesses

• CWE-770: CWE-770 Allocation of Resources Without Limits or Throttling

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

CVE Program Container

Additional References

• https://www.ibm.com/support/pages/node/7156847
• https://exchange.xforce.ibmcloud.com/vulnerabilities/285246
• https://security.netapp.com/advisory/ntap-20240912-0005/

References

• https://www.ibm.com/support/pages/node/7156847
• https://exchange.xforce.ibmcloud.com/vulnerabilities/285246

• ←Previous
• Next→