DeutschShown in its original language — a full translation is planned for a future version.
IBM DB2: Mehrere Schwachstellen
view advisory published 2024-01-08
Ein entfernter Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.
01
describes (8)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-47141US | medium6.5 | — | ||
IIBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 could allow an authenticated user with CONNECT privileges to cause a denial of service using a specially cra… | ||||
| CVE-2023-47747US | medium6.5 | — | ||
IBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.1, 10.5, and 11.1 could allow an authenticated user with CONNECT privileges to cause a denial of service using… | ||||
| CVE-2023-47158US | medium6.5 | — | ||
IBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server)
10.5, 11.1 and 11.5
could allow an authenticated user with CONNECT privileges to cause a denial of service usi… | ||||
| CVE-2023-47152US | high7.5 | — | ||
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 is vulnerable to an insecure cryptographic algorithm and to information disclosure in stack trace under excep… | ||||
| CVE-2023-27859US | medium6.5 | — | ||
IBM Db2 10.1, 10.5, and 11.1 could allow a remote user to execute arbitrary code caused by installing like named jar files across multiple databases. A user could exploit this by… | ||||
| CVE-2023-50308US | medium6.5 | — | ||
IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5 under certain circumstances could allow an authenticated user to the database to cause a denial of service wh… | ||||
| CVE-2023-47746US | medium6.5 | — | ||
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 could allow an authenticated user with CONNECT privileges to cause a denial of service using… | ||||
| CVE-2023-45193US | high7.5 | — | ||
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 federated server is vulnerable to a denial of service when a specially crafted cursor is used. IBM X-Force I… | ||||
02
references
External citations — patches, advisories, analysis.
- WID-SEC-W-2024-0022 - CSAF Versionself
- WID-SEC-2024-0022 - Portal Versionself
- IBM Security Bulletin 7105496 vom 2024-01-08external
- IBM Security Bulletin 7105497 vom 2024-01-08external
- IBM Security Bulletin 7105499 vom 2024-01-08external
- IBM Security Bulletin 7105501 vom 2024-01-08external
- IBM Security Bulletin 7105502 vom 2024-01-08external
- IBM Security Bulletin 7105503 vom 2024-01-08external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan