Vulnerabilities > CVE-2023-47747 - Unspecified vulnerability in IBM DB2

CVSS 6.5 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

ibm

NVD

Published: 2024-01-22

Updated: 2024-03-07

Summary

IBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.1, 10.5, and 11.1 could allow an authenticated user with CONNECT privileges to cause a denial of service using a specially crafted query. IBM X-Force ID: 272646.

Vulnerable Configurations

Part	Description	Count
Application	Ibm IBM DB2 10.5.0.0 IBM DB2 10.5.0.1 IBM DB2 10.5.0.2 IBM DB2 10.5.0.3 IBM DB2 10.5.0.4 IBM DB2 10.5.0.5 IBM DB2 10.5.0.6 IBM DB2 10.5.0.7 IBM DB2 10.5.0.8 IBM DB2 10.5.0.9 IBM DB2 10.5.0.10 IBM DB2 10.5.0.11 IBM DB2 11.1.0.0 IBM DB2 11.1.1.1 IBM DB2 11.1.2.2 IBM DB2 11.1.3 IBM DB2 11.1.3.2 IBM DB2 11.1.3.3 IBM DB2 11.1.4 IBM DB2 11.1.4.4 IBM DB2 11.1.4.7 IBM DB2 11.5 IBM DB2 11.5.5.0 IBM DB2 11.5.6 IBM DB2 11.5.8 IBM DB2 11.5.9	78
OS	Hp HP HP UX -	1
OS	Ibm IBM AIX - IBM Linux ON IBM Z -	2
OS	Linux Linux Linux Kernel -	1
OS	Microsoft Microsoft Windows -	1
OS	Oracle Oracle Solaris -	1

Summary

Vulnerable Configurations

References