CVE-2023-28523
09.12.2023, 03:15
IBM Informix Dynamic Server 12.10 and 14.10 onsmsync is vulnerable to a heap buffer overflow, caused by improper bounds checking which could allow an attacker to execute arbitrary code. IBM X-Force ID: 250753.Enginsight
| Vendor | Product | Version |
|---|---|---|
| ibm | informix_dynamic_server | 12.10 |
| ibm | informix_dynamic_server | 14.10 |
| ibm | informix_dynamic_server_on_cloud_pak_for_data | * |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-122 - Heap-based Buffer OverflowA heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().
- CWE-787 - Out-of-bounds WriteThe software writes data past the end, or before the beginning, of the intended buffer.