Vulnerabilities > CVE-2023-40687 - Unspecified vulnerability in IBM DB2

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

ibm

NVD

Published: 2023-12-04

Updated: 2024-11-21

Summary

IBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted RUNSTATS command on an 8TB table. IBM X-Force ID: 264809.

Vulnerable Configurations

Part	Description	Count
Application	Ibm IBM DB2 - IBM DB2 3.5 IBM DB2 4.0 IBM DB2 4.5 IBM DB2 8.0 IBM DB2 8.1 IBM DB2 8.1.4 IBM DB2 8.1.5 IBM DB2 8.1.6 IBM DB2 8.1.6C IBM DB2 8.1.7 IBM DB2 8.1.7B IBM DB2 8.1.8 IBM DB2 8.1.8A IBM DB2 8.1.9 IBM DB2 8.1.9A IBM DB2 8.2 IBM DB2 8.2.0 IBM DB2 8.2.1 IBM DB2 8.2.2 IBM DB2 8.10 IBM DB2 8.12 IBM DB2 9.0 IBM DB2 9.1 IBM DB2 9.1.0.1 IBM DB2 9.1.0.2 IBM DB2 9.1.0.3 IBM DB2 9.1.0.4 IBM DB2 9.1.0.5 IBM DB2 9.1.0.6 IBM DB2 9.1.0.7 IBM DB2 9.1.0.8 IBM DB2 9.1.0.9 IBM DB2 9.1.0.10 IBM DB2 9.1.0.11 IBM DB2 9.1.1000.504 IBM DB2 9.5 IBM DB2 9.5.0.1 IBM DB2 9.5.0.2 IBM DB2 9.5.0.3 IBM DB2 9.5.0.4 IBM DB2 9.5.0.5 IBM DB2 9.5.0.6 IBM DB2 9.5.0.7 IBM DB2 9.5.0.8 IBM DB2 9.5.0.9 IBM DB2 9.5.0.10 IBM DB2 9.5.800.186 IBM DB2 9.7 IBM DB2 9.7.0.0 IBM DB2 9.7.0.1 IBM DB2 9.7.0.2 IBM DB2 9.7.0.3 IBM DB2 9.7.0.4 IBM DB2 9.7.0.5 IBM DB2 9.7.0.6 IBM DB2 9.7.0.7 IBM DB2 9.7.0.8 IBM DB2 9.7.0.9 IBM DB2 9.7.0.10 IBM DB2 9.7.0.11 IBM DB2 9.7.400.501 IBM DB2 9.8 IBM DB2 9.8.0.1 IBM DB2 9.8.0.2 IBM DB2 9.8.0.3 IBM DB2 9.8.0.4 IBM DB2 9.8.0.5 IBM DB2 10.0 IBM DB2 10.1 IBM DB2 10.1.0.0 IBM DB2 10.1.0.1 IBM DB2 10.1.0.2 IBM DB2 10.1.0.3 IBM DB2 10.1.0.4 IBM DB2 10.1.0.5 IBM DB2 10.1.0.6 IBM DB2 10.5 IBM DB2 10.5.0.0 IBM DB2 10.5.0.1 IBM DB2 10.5.0.2 IBM DB2 10.5.0.3 IBM DB2 10.5.0.4 IBM DB2 10.5.0.5 IBM DB2 10.5.0.6 IBM DB2 10.5.0.7 IBM DB2 10.5.0.8 IBM DB2 10.5.0.9 IBM DB2 10.5.0.10 IBM DB2 10.5.0.11 IBM DB2 11.1.0.0 IBM DB2 11.1.1.1 IBM DB2 11.1.2.2 IBM DB2 11.1.3 IBM DB2 11.1.3.2 IBM DB2 11.1.3.3 IBM DB2 11.1.4 IBM DB2 11.1.4.4 IBM DB2 11.1.4.7 IBM DB2 11.5 IBM DB2 11.5.5.0 IBM DB2 11.5.6 IBM DB2 11.5.8 IBM DB2 11.5.9	448
OS	Linux Linux Linux Kernel -	1
OS	Microsoft Microsoft Windows -	1
OS	Opengroup Opengroup Unix -	1

Summary

Vulnerable Configurations

References