DeutschShown in its original language — a full translation is planned for a future version.
IBM DB2: Mehrere Schwachstellen
view advisory published 2022-06-23
Ein lokaler Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um beliebigen Programmcode auszuführen oder einen Denial of Service Zustand herbeizuführen.
01
describes (7)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-22390US | high7.5 | — | ||
IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 may be vulnerable to an information disclosure caused by improper privilege management when table function is us… | ||||
| CVE-2022-22389US | medium6.5 | — | ||
IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to a denial of service as the server may terminate abnormally when executing specially crafted SQL… | ||||
| CVE-2022-25315US | critical9.8 | Exploit | ||
In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames. | ||||
| CVE-2022-25314US | high7.5 | Exploit | ||
In Expat (aka libexpat) before 2.4.5, there is an integer overflow in copyString. | ||||
| CVE-2022-25313US | medium6.5 | Exploit | ||
In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via a large nesting depth in the DTD element. | ||||
| CVE-2022-25236US | critical9.8 | Exploit | ||
xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs. | ||||
| CVE-2022-25235US | critical9.8 | Exploit | ||
xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context. | ||||
02
references
External citations — patches, advisories, analysis.
- HCL Article KB0101680 vom 2022-11-29external
- WID-SEC-W-2022-0457 - CSAF Versionself
- WID-SEC-2022-0457 - Portal Versionself
- IBM Security Bulletin: 6597637 vom 2022-06-23external
- IBM Security Bulletin: 6597637 vom 2022-06-23external
- IBM Security Bulletin: 6597637 vom 2022-06-23external
- IBM Security Bulletin 6959019 vom 2023-03-01external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan