Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveIbmCVE-2023-29267
HistoryJun 12, 2024 - 7:15 p.m.

CVE-2023-29267

2024-06-1219:15:50
CWE-399
ibm
web.nvd.nist.gov
32
ibm
db2
vulnerability
denial of service
sql statement
authenticated user
crash
x-force id

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

5.6

Confidence

High

EPSS

0

Percentile

13.6%

JSON

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5is vulnerable to a denial of service, under specific configurations, as the server may crash when using a specially crafted SQL statement by an authenticated user. IBM X-Force ID: 287612.

Affected configurations

Nvd
Vulners
Node
ibmdb2Match10.5linux
OR
ibmdb2Match10.5unix
OR
ibmdb2Match10.5windows
OR
ibmdb2Match11.1linux
OR
ibmdb2Match11.1unix
OR
ibmdb2Match11.1windows
OR
ibmdb2Match11.5linux
OR
ibmdb2Match11.5unix
OR
ibmdb2Match11.5windows
VendorProductVersionCPE
ibmdb210.5cpe:2.3:a:ibm:db2:10.5:*:*:*:*:linux:*:*
ibmdb210.5cpe:2.3:a:ibm:db2:10.5:*:*:*:*:unix:*:*
ibmdb210.5cpe:2.3:a:ibm:db2:10.5:*:*:*:*:windows:*:*
ibmdb211.1cpe:2.3:a:ibm:db2:11.1:*:*:*:*:linux:*:*
ibmdb211.1cpe:2.3:a:ibm:db2:11.1:*:*:*:*:unix:*:*
ibmdb211.1cpe:2.3:a:ibm:db2:11.1:*:*:*:*:windows:*:*
ibmdb211.5cpe:2.3:a:ibm:db2:11.5:*:*:*:*:linux:*:*
ibmdb211.5cpe:2.3:a:ibm:db2:11.5:*:*:*:*:unix:*:*
ibmdb211.5cpe:2.3:a:ibm:db2:11.5:*:*:*:*:windows:*:*

CNA Affected

[
  {
    "cpes": [
      "cpe:2.3:a:ibm:db2:10.5:*:*:*:*:linux:*:*",
      "cpe:2.3:a:ibm:db2:10.5:*:*:*:*:unix:*:*",
      "cpe:2.3:a:ibm:db2:10.5:*:*:*:*:aix:*:*",
      "cpe:2.3:a:ibm:db2:10.5:*:*:*:*:hp-ux:*:*",
      "cpe:2.3:a:ibm:db2:10.5:*:*:*:*:windows:*:*",
      "cpe:2.3:a:ibm:db2:11.1:*:*:*:*:linux:*:*",
      "cpe:2.3:a:ibm:db2:11.1:*:*:*:*:unix:*:*",
      "cpe:2.3:a:ibm:db2:11.1:*:*:*:*:aix:*:*",
      "cpe:2.3:a:ibm:db2:11.1:*:*:*:*:hp-ux:*:*",
      "cpe:2.3:a:ibm:db2:11.1:*:*:*:*:windows:*:*",
      "cpe:2.3:a:ibm:db2:11.5:*:*:*:*:linux:*:*",
      "cpe:2.3:a:ibm:db2:11.5:*:*:*:*:unix:*:*",
      "cpe:2.3:a:ibm:db2:11.5:*:*:*:*:aix:*:*",
      "cpe:2.3:a:ibm:db2:11.5:*:*:*:*:hp-ux:*:*",
      "cpe:2.3:a:ibm:db2:11.5:*:*:*:*:windows:*:*"
    ],
    "defaultStatus": "unaffected",
    "product": "Db2 for Linux, UNIX and Windows",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "10.5, 11.1, 11.5"
      }
    ]
  }
]

Related

ibm 6
cvelist 1
vulnrichment 1
nvd 1
ibm
ibm
Security Bulletin: IBM® Db2® is vulnerable to a denial of service as a trap may occur when selecting from certain types of tables. (CVE-2023-29267)
2024-06-11 19:48:44
Security Bulletin: Multiple security vulnerabilities have been identified in IBM Db2 shipped with IBM Security Guardium Key Lifecycle Manager
2024-07-10 07:05:57
Security Bulletin: Multiple Vulnerabilities have been identified in IBM Db2 shipped with IBM WebSphere Remote Server
2024-06-18 20:03:13
cvelist
cvelist
CVE-2023-29267 IBM Db2 denial of service
2024-06-12 18:24:20
vulnrichment
vulnrichment
CVE-2023-29267 IBM Db2 denial of service
2024-06-12 18:24:20
nvd
nvd
CVE-2023-29267
2024-06-12 19:15:50

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

5.6

Confidence

High

EPSS

0

Percentile

13.6%

JSON
Related for CVE-2023-29267
ibm6cvelist1vulnrichment1nvd1