Lucene search
China National Vulnerability DatabaseCNVD-2023-98174HistoryDec 08, 2023 - 12:00 a.m.
IBM Db2 Input Validation Error Vulnerability (CNVD-2023-9817439)
2023-12-0800:00:00
China National Vulnerability Database
www.cnvd.org.cn
8
ibm
db2
input validation
vulnerability
dos
runstats
table
attack
IBM Db2 is a relational database management system from International Business Machines (IBM). The system’s execution environments are mainly UNIX, Linux, IBMi, z/OS, and Windows server versions. IBM DB2 suffers from an input validation error vulnerability that stems from the susceptibility to denial-of-service attacks when using the specially crafted RUNSTATS command on tables 8TB or larger. An attacker could exploit the vulnerability to cause a DoS.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ibm db2 >=11.1.0.0，<=11. | eq | 1.4.7 | |
| ibm db2 >=11.5， | le | 11.5.9 | |
| ibm db2 <=10. | eq | 5.0.11 |
Related
ibm
ibm
Security Bulletin: IBM® Db2® is vulnerable to denial of service with a specially crafted RUNSTATS command. (CVE-2023-40687)
2023-12-20 20:15:04
nvd
nvd
CVE-2023-40687
2023-12-04 02:15:07
cvelist
cvelist
CVE-2023-40687 IBM Db2 denial of service
2023-12-04 01:10:23
prion
prion
Design/Logic Flaw
2023-12-04 02:15:00
cve
cve
CVE-2023-40687
2023-12-04 02:15:07