DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
IBM DB2: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2024-01-08
Ein entfernter Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.
01
beschreibt (8)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-47141US | medium6.5 | — | ||
IIBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 could allow an authenticated user with CONNECT privileges to cause a denial of service using a specially cra… | ||||
| CVE-2023-47747US | medium6.5 | — | ||
IBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.1, 10.5, and 11.1 could allow an authenticated user with CONNECT privileges to cause a denial of service using… | ||||
| CVE-2023-47158US | medium6.5 | — | ||
IBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server)
10.5, 11.1 and 11.5
could allow an authenticated user with CONNECT privileges to cause a denial of service usi… | ||||
| CVE-2023-47152US | high7.5 | — | ||
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 is vulnerable to an insecure cryptographic algorithm and to information disclosure in stack trace under excep… | ||||
| CVE-2023-27859US | medium6.5 | — | ||
IBM Db2 10.1, 10.5, and 11.1 could allow a remote user to execute arbitrary code caused by installing like named jar files across multiple databases. A user could exploit this by… | ||||
| CVE-2023-50308US | medium6.5 | — | ||
IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5 under certain circumstances could allow an authenticated user to the database to cause a denial of service wh… | ||||
| CVE-2023-47746US | medium6.5 | — | ||
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 could allow an authenticated user with CONNECT privileges to cause a denial of service using… | ||||
| CVE-2023-45193US | high7.5 | — | ||
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 federated server is vulnerable to a denial of service when a specially crafted cursor is used. IBM X-Force I… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- WID-SEC-W-2024-0022 - CSAF Versionself
- WID-SEC-2024-0022 - Portal Versionself
- IBM Security Bulletin 7105496 vom 2024-01-08external
- IBM Security Bulletin 7105497 vom 2024-01-08external
- IBM Security Bulletin 7105499 vom 2024-01-08external
- IBM Security Bulletin 7105501 vom 2024-01-08external
- IBM Security Bulletin 7105502 vom 2024-01-08external
- IBM Security Bulletin 7105503 vom 2024-01-08external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan