CVE-2023-30447: IBM Db2 denial of service
Published Jul 7, 2023
·Updated
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on certain tables. IBM X-Force ID: 253436.
Affected Software
11 affected components
IBM IBM® Db2®<=10.5.0.11
IBM IBM® Db2®<=11.1.4.7
IBM IBM® Db2®<=11.5.x
IBM DB2=10.5.0.11
IBM DB2=11.1.4.7
IBM DB2=11.5
HP HP-UX
IBM AIX
Linux Linux kernel
Microsoft Windows
Oracle Solaris
Remediation
Patch Available
Event History
Jul 7, 2023
CVE Published
via IBM·12:00 AM
Data Sourced
via IBM·12:00 AM
DescriptionSeverityAffected Software
Jul 8, 2023
CVE Published
via MITRE·06:07 PM
Data Sourced
via MITRE·06:07 PM
DescriptionSeverityWeakness
Jul 10, 2023
Data Sourced
04:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2023-30447?
CVE-2023-30447 is a vulnerability in IBM Db2 for Linux, UNIX, and Windows that allows a denial of service attack with a specially crafted query on certain tables.
2
Which versions of IBM Db2 are affected by CVE-2023-30447?
IBM Db2 versions 10.5, 11.1, and 11.5 are affected by CVE-2023-30447.
3
What is the severity of CVE-2023-30447?
CVE-2023-30447 has a severity rating of high.
4
How can I fix CVE-2023-30447?
To fix CVE-2023-30447, update to a patched version of IBM Db2 for Linux, UNIX, and Windows.
5
Where can I find more information about CVE-2023-30447?
You can find more information about CVE-2023-30447 on the IBM X-Force ID page and the IBM support page.