CVE-2022-22389: SQL Injection

Published Jun 24, 2022

Updated

IBM Db2 is vulnerable to a denial of service as the server may terminate abnormally when executing specially crafted SQL statements by an authenticated user.

Other sources

IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to a denial of service as the server may terminate abnormally when executing specially crafted SQL statements by an authenticated user. IBM X-Force ID: 2219740.

Affected Software

8 affected components

IBM DB2=9.7

IBM DB2=10.1

IBM DB2=10.5

IBM DB2=11.1

IBM DB2=11.5

Linux Linux kernel

Microsoft Windows

Opengroup Unix

Event History

Jun 24, 2022

CVE Published

via MITRE·04:45 PM

Data Sourced

via MITRE·04:45 PM

DescriptionSeverityWeakness

Aug 3, 2024

Data Sourced

via IBM·03:20 AM

DescriptionSeverityAffected Software

Parent advisories

This vulnerability appears in the following advisories.

IBM-6598047

Frequently Asked Questions

What is the severity of CVE-2022-22389?

The severity of CVE-2022-22389 is medium (6.5).

How does CVE-2022-22389 affect IBM Db2 for Linux, UNIX and Windows?

CVE-2022-22389 allows an authenticated user to execute specially crafted SQL statements that may cause the server to terminate abnormally, leading to a denial of service.

Which versions of IBM Db2 for Linux, UNIX and Windows are affected by CVE-2022-22389?

CVE-2022-22389 affects IBM Db2 for Linux, UNIX and Windows versions 9.7, 10.1, 10.5, 11.1, and 11.5.

Is IBM Db2 for Linux, UNIX and Windows the only affected software?

Yes, IBM Db2 for Linux, UNIX and Windows is the only affected software.

How can I fix the vulnerability in IBM Db2 for Linux, UNIX and Windows?

To fix the vulnerability in IBM Db2 for Linux, UNIX and Windows, it is recommended to apply the latest security updates provided by IBM.