CVE-2022-22389: SQL Injection
First published: Fri Jun 24 2022(Updated: )
IBM Db2 is vulnerable to a denial of service as the server may terminate abnormally when executing specially crafted SQL statements by an authenticated user.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Ibm Db2 | =9.7 | |
| Ibm Db2 | =10.1 | |
| Ibm Db2 | =10.5 | |
| Ibm Db2 | =11.1 | |
| Ibm Db2 | =11.5 | |
| Linux Linux kernel | ||
| Microsoft Windows | ||
| Opengroup Unix |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2022-22389?
The severity of CVE-2022-22389 is medium (6.5).
How does CVE-2022-22389 affect IBM Db2 for Linux, UNIX and Windows?
CVE-2022-22389 allows an authenticated user to execute specially crafted SQL statements that may cause the server to terminate abnormally, leading to a denial of service.
Which versions of IBM Db2 for Linux, UNIX and Windows are affected by CVE-2022-22389?
CVE-2022-22389 affects IBM Db2 for Linux, UNIX and Windows versions 9.7, 10.1, 10.5, 11.1, and 11.5.
Is IBM Db2 for Linux, UNIX and Windows the only affected software?
Yes, IBM Db2 for Linux, UNIX and Windows is the only affected software.
How can I fix the vulnerability in IBM Db2 for Linux, UNIX and Windows?
To fix the vulnerability in IBM Db2 for Linux, UNIX and Windows, it is recommended to apply the latest security updates provided by IBM.
- agent/weakness
- agent/references
- agent/author
- agent/type
- agent/description
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- collector/nvd-index
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/tags
- agent/severity
- collector/mitre-cve
- source/MITRE
- collector/ibm-support
- source/IBM
- vendor/ibm
- canonical/ibm db2
- version/ibm db2/9.7
- version/ibm db2/10.1
- version/ibm db2/10.5
- version/ibm db2/11.1
- version/ibm db2/11.5
- vendor/linux
- canonical/linux linux kernel
- vendor/microsoft
- canonical/microsoft windows
- vendor/opengroup
- canonical/opengroup unix