CVE-2023-40687: IBM Db2 denial of service

Q: What is the vulnerability ID of IBM DB2 denial of service?

The vulnerability ID of IBM DB2 denial of service is CVE-2023-40687.

Q: What is the severity of CVE-2023-40687?

The severity of CVE-2023-40687 is medium with a severity value of 5.3.

Q: Which versions of IBM DB2 are affected by CVE-2023-40687?

IBM DB2 versions 10.5.0.11, 11.1.4.7, and 11.5.x are affected by CVE-2023-40687.

Q: How does CVE-2023-40687 lead to denial of service?

CVE-2023-40687 can be exploited with a specially crafted RUNSTATS command on an 8TB table, causing denial of service.

Q: Is there a fix available for CVE-2023-40687?

For a fix for CVE-2023-40687, refer to the official IBM support page: https://www.ibm.com/support/pages/node/7087149.

Published Dec 4, 2023

Updated

IBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted RUNSTATS command on an 8TB table. IBM X-Force ID: 264809.

Other sources

IBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server) is vulnerable to denial of service with a specially crafted RUNSTATS command on an 8TB table.

Affected Software

9 affected components

IBM IBM® Db2®<=10.5.0.11

IBM IBM® Db2®<=11.1.4.7

IBM IBM® Db2®<=11.5.x

All of the following

Any of the following

IBM DB2<=10.5.0.11

IBM DB2>=11.1.0.0<=11.1.4.7

IBM DB2>=11.5<=11.5.9

Any of the following

Linux Linux kernel

Microsoft Windows

Opengroup Unix

Event History

Dec 4, 2023

CVE Published

01:10 AM

Data Sourced

01:10 AM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-7087149

Frequently Asked Questions

What is the vulnerability ID of IBM DB2 denial of service?

The vulnerability ID of IBM DB2 denial of service is CVE-2023-40687.

What is the severity of CVE-2023-40687?

The severity of CVE-2023-40687 is medium with a severity value of 5.3.

Which versions of IBM DB2 are affected by CVE-2023-40687?