PT-2024-13028 · Ibm · Db2

Published 2024-05-29 · Updated 2025-08-18 · CVE-2023-42005

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data versions 3.5 through 4.8

Description The issue allows a user with access to the Kubernetes pod to make system calls, compromising the security of containers.

Recommendations For versions 3.5 through 4.8, consider restricting access to the Kubernetes pod to minimize the risk of exploitation. As a temporary workaround, review and limit system calls made from within the pod until a patch is available.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2023-42005

Affected Products

Db2

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2023-42005 · Security Note
• https://osv.dev/vulnerability/CVE-2023-42005 · Vendor Advisory
• https://ibm.com/support/pages/node/7155078 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/265264 · Vendor Advisory
• https://t.me/cvenotify/81367 · Telegram Post
• https://t.me/cveNotify/132664 · Telegram Post
• https://t.me/cvenotify/81394 · Telegram Post