PT-2023-6237 · Ibm · Ibm Db2

CVE-2023-38740 · Publicado 2023-10-16 · Atualizado 2023-12-22

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions IBM Db2 for Linux, UNIX, and Windows (includes Db2 Connect Server) version 11.5

Description The issue is related to errors in processing input data, which can be exploited by a remote attacker to cause a denial of service with a specially crafted SQL statement.

Recommendations For IBM Db2 for Linux, UNIX, and Windows (includes Db2 Connect Server) version 11.5, consider restricting the use of SQL statements until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

BDU:2023-06946

CVE-2023-38740

Produtos afetados

Ibm Db2

Referências · 12

• https://exchange.xforce.ibmcloud.com/vulnerabilities/262613 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/1714032992505528396 · Publicação no Twitter
• https://vuldb.com/?id.242336 · Nota
• https://ibm.com/support/pages/node/7047489 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-38740 · Nota de Segurança
• https://ibm.com/support/pages/node/7047554 · Aviso do Fabricante
• https://twitter.com/VulmonFeeds/status/1714078451219546566 · Publicação no Twitter
• https://t.me/cibsecurity/72384 · Publicação no Telegram
• https://bdu.fstec.ru/vul/2023-06946 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-38740 · Aviso do Fabricante
• https://security.netapp.com/advisory/ntap-20231116-0007 · Nota
• https://t.me/cvenotify/59551 · Publicação no Telegram