CVE-2023-30991: IBM Db2 denial of service
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 is vulnerable to denial of service with a specially crafted query. IBM X-Force ID: 254037.
Other sources
IBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server) is vulnerable to denial of service with a specially crafted query.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2023-30991?
The severity of CVE-2023-30991 is high with a severity value of 7.5.
How does CVE-2023-30991 affect IBM Db2?
CVE-2023-30991 affects IBM Db2 for Linux, UNIX, and Windows versions 11.1.4.x and 11.5.x.
What is the vulnerability description of CVE-2023-30991?
CVE-2023-30991 is a denial of service vulnerability in IBM Db2 for Linux, UNIX, and Windows (includes Db2 Connect Server) 11.1 and 11.5, which can be exploited with a specially crafted query.
How can CVE-2023-30991 be exploited?
CVE-2023-30991 can be exploited using a specially crafted query.
Is there a fix available for CVE-2023-30991?
To fix CVE-2023-30991, update IBM Db2 for Linux, UNIX, and Windows versions 11.1 and 11.5 to the latest available version.