CVE-2023-38728: IBM Db2 denial of service
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted XML query statement. IBM X-Force ID: 262258.
Other sources
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) is vulnerable to denial of service with a specially crafted XML query statement.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2023-38728?
CVE-2023-38728 is a vulnerability in IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) that allows for denial of service with a specially crafted XML query statement.
Which versions of IBM Db2 are affected by CVE-2023-38728?
IBM Db2 versions 10.5, 11.1, and 11.5 are affected by CVE-2023-38728.
How severe is CVE-2023-38728?
CVE-2023-38728 has a severity rating of 7.5 (high).
How can I fix CVE-2023-38728?
To fix CVE-2023-38728, install the necessary patches and updates provided by IBM.
Where can I find more information about CVE-2023-38728?
You can find more information about CVE-2023-38728 on the IBM X-Force ID page and the IBM support page.