CVE-2023-47746
22.01.2024, 19:15
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 could allow an authenticated user with CONNECT privileges to cause a denial of service using a specially crafted query. IBM X-Force ID: 272644.Enginsight
| Vendor | Product | Version |
|---|---|---|
| ibm | db2 | 10.5.0.0 ≤ 𝑥 ≤ 10.5.0.11 |
| ibm | db2 | 11.1.0.0 ≤ 𝑥 ≤ 11.1.4.7 |
| ibm | db2 | 11.5 ≤ 𝑥 ≤ 11.5.9 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-20 - Improper Input ValidationThe product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
- CWE-770 - Allocation of Resources Without Limits or ThrottlingThe software allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.
References