CVE-2023-30987: IBM Db2 denial of service
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on certain databases. IBM X-Force ID: 253440.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2023-30987?
CVE-2023-30987 is a vulnerability in IBM Db2 for Linux, UNIX and Windows that allows for denial of service attacks through a specially crafted query.
Which versions of IBM Db2 for Linux, UNIX and Windows are affected by CVE-2023-30987?
IBM Db2 for Linux, UNIX and Windows versions 10.5, 11.1, and 11.5 are affected by CVE-2023-30987.
What is the severity of CVE-2023-30987?
The severity of CVE-2023-30987 is medium with a score of 5.3.
How does CVE-2023-30987 allow for denial of service attacks?
CVE-2023-30987 allows for denial of service attacks by exploiting a vulnerability with a specially crafted query on certain databases.
Is there a fix available for CVE-2023-30987?
Yes, IBM has released a fix for CVE-2023-30987. Please refer to the IBM website or contact their support for more information.