Lucene search
IbmCVELIST:CVE-2023-27559HistoryApr 26, 2023 - 7:02 p.m.
CVE-2023-27559 IBM Db2 denial of service
2023-04-2619:02:45
CWE-20
ibm
www.cve.org
7
ibm db2
denial of service
vulnerability
10.5
11.1
11.5
sql injection
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
AI Score
7.3
Confidence
High
EPSS
0.001
Percentile
40.7%
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to a denial of service as the server may crash when using a specially crafted subquery. IBM X-Force ID: 249196.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Db2 for Linux, UNIX and Windows",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "10.5, 11.1, 11.5"
}
]
}
]Related
nessus
nessus
prion
prion
Design/Logic Flaw
2023-04-26 20:15:00
cve
cve
CVE-2023-27559
2023-04-26 20:15:09
ibm
ibm
Security Bulletin: IBM® Db2® is vulnerable to a denial of service as the server may crash when using a specially crafted subquery. (CVE-2023-27559)
2023-04-24 21:36:24
nvd
nvd
CVE-2023-27559
2023-04-26 20:15:09
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
AI Score
7.3
Confidence
High
EPSS
0.001
Percentile
40.7%
Related for CVELIST:CVE-2023-27559