CVE-2023-28527: IBM Informix Dynamic Server buffer overflow
First published: Mon Dec 04 2023(Updated: )
IBM Informix Dynamic Server 12.10 and 14.10 cdr is vulnerable to a heap buffer overflow, caused by improper bounds checking which could allow a local user to cause a segmentation fault. IBM X-Force ID: 251206.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Informix Dynamic Server | <=12.10 | |
| IBM Informix Dynamic Server | <=14.10 | |
| IBM Informix Dynamic Server on Cloud Pak for Data | <=All | |
| IBM Informix Dynamic Server | =12.10 | |
| IBM Informix Dynamic Server | =14.10 | |
| IBM Informix Dynamic Server on Cloud Pak for Data |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this IBM Informix Dynamic Server vulnerability?
The vulnerability ID for this IBM Informix Dynamic Server vulnerability is CVE-2023-28527.
What is the title of this vulnerability?
The title of this vulnerability is 'IBM Informix Dynamic Server buffer overflow.'
What is the severity of this vulnerability?
The severity of this vulnerability is medium, with a severity value of 6.2.
What is the affected software?
The affected software is IBM Informix Dynamic Server 12.10 and 14.10, as well as IBM Informix Dynamic Server on Cloud Pak for Data.
How does this vulnerability manifest?
This vulnerability manifests as a heap buffer overflow, caused by improper bounds checking, which could allow a local user to cause a segmentation fault.
Are there any references for this vulnerability?
Yes, you can find more information about this vulnerability at the following references: [IBM Support](https://www.ibm.com/support/pages/node/7070188) and [IBM X-Force](https://exchange.xforce.ibmcloud.com/vulnerabilities/251206).
What CWE IDs are associated with this vulnerability?
This vulnerability is associated with CWE-119 and CWE-122.
- collector/nvd-api
- agent/references
- agent/type
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/title
- agent/last-modified-date
- agent/author
- agent/weakness
- agent/description
- agent/tags
- agent/event
- collector/ibm-support
- source/IBM
- agent/software-canonical-lookup
- vendor/ibm
- canonical/ibm informix dynamic server
- version/ibm informix dynamic server/12.10
- version/ibm informix dynamic server/14.10
- canonical/ibm informix dynamic server on cloud pak for data
- version/ibm informix dynamic server on cloud pak for data/all