CVE-2023-38740: IBM Db2 denial of service

Q: What is the vulnerability ID for the IBM Db2 vulnerability?

The vulnerability ID for the IBM Db2 vulnerability is CVE-2023-38740.

Q: What is the severity of CVE-2023-38740?

The severity of CVE-2023-38740 is high with a CVSS score of 7.5.

Q: What is the affected software for CVE-2023-38740?

The affected software for CVE-2023-38740 is IBM Db2 for Linux, UNIX, and Windows (includes Db2 Connect Server) 11.5.

Q: What is the impact of the CVE-2023-38740 vulnerability?

The CVE-2023-38740 vulnerability allows an attacker to cause a denial of service by using a specially crafted SQL statement.

Q: How to fix CVE-2023-38740?

To fix CVE-2023-38740, update IBM Db2 for Linux, UNIX, and Windows to a version higher than 11.5.8.

Published Oct 16, 2023

Updated

IBM Db2 for Linux, UNIX, and Windows (includes Db2 Connect Server) 11.5 is vulnerable to a denial of service with a specially crafted SQL statement. IBM X-Force ID: 262613.

Other sources

IBM Db2 for Linux, UNIX, and Windows (includes Db2 Connect Server) is vulnerable to a denial of service with a specially crafted SQL statement.

Affected Software

9 affected components

IBM IBM® Db2®<=11.5.x

All of the following

IBM DB2>=11.5<=11.5.8

Any of the following

Linux Linux kernel

Microsoft Windows

Opengroup Unix

IBM DB2>=11.5<=11.5.8

Linux Linux kernel

Microsoft Windows

Opengroup Unix

Remediation

Patch Available

https://www.ibm.com/support/pages/node/7047554

Event History

Oct 16, 2023

CVE Published

09:24 PM

Data Sourced

09:24 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-7047554

Frequently Asked Questions

What is the vulnerability ID for the IBM Db2 vulnerability?

The vulnerability ID for the IBM Db2 vulnerability is CVE-2023-38740.

What is the severity of CVE-2023-38740?