WID-SEC-W-2023-0309

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

IBM DB2: Mehrere Schwachstellen

view advisory published 2023-02-08

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um Informationen offenzulegen oder einen Denial of Service Zustand herbeizuführen.

01

describes (3)

Related CVEs.

IDseverity exploitable
CVE-2022-43930UShigh7.5—
IBM Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 is vulnerable to an Information Disclosure as sensitive information may be included in a log file. IBM X-Force ID: 241677…
CVE-2022-43929UShigh7.5—
IBM Db2 for Linux, UNIX and Windows 11.1 and 11.5 may be vulnerable to a Denial of Service when executing a specially crafted 'Load' command. IBM X-Force ID: 241676.
CVE-2022-43927UShigh7.5—
IBM Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 is vulnerable to information Disclosure due to improper privilege management when a specially crafted table access is used.…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan