DeutschShown in its original language — a full translation is planned for a future version.
IBM DB2: Mehrere Schwachstellen
view advisory published 2023-04-24
Ein Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um einen Denial of Service Angriff durchzuführen und beliebigen Code auszuführen.
01
describes (7)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-26022US | high7.5 | — | ||
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) is vulnerable to a denial of service as the server may crash when an Out of Memory occurs using the DBMS_OUTPUT mo… | ||||
| CVE-2023-26021US | high7.5 | — | ||
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 is vulnerable to a denial of service as the server may crash when compiling a specially crafted SQL… | ||||
| CVE-2023-27555US | high7.5 | — | ||
IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5 is vulnerable to a denial of service when attempting to use ACR client affinity for unfenced DRDA federation… | ||||
| CVE-2023-25930US | medium5.9 | — | ||
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.1, 11.1, and 11.5 is vulnerable to a denial of service. Under rare conditions, setting a special register may… | ||||
| CVE-2023-29255US | high7.5 | — | ||
IBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to a denial of service as it may trap when compiling a variation of an anonymou… | ||||
| CVE-2023-27559US | high7.5 | — | ||
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to a denial of service as the server may crash when using a specially crafted s… | ||||
| CVE-2023-29257US | high7.2 | — | ||
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to remote code execution as a database administrator of one database may execut… | ||||
02
references
External citations — patches, advisories, analysis.
- WID-SEC-W-2023-1065 - CSAF Versionself
- WID-SEC-2023-1065 - Portal Versionself
- IBM Security Advisory vom 2023-04-24external
- IBM Security Advisory vom 2023-04-24external
- IBM Security Advisory vom 2023-04-24external
- IBM Security Advisory vom 2023-04-24external
- IBM Security Advisory vom 2023-04-24external
- IBM Security Advisory vom 2023-04-24external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan