CVE-2023-47747

IBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.1, 10.5, and 11.1 could allow an authenticated user with CONNECT privileges to cause a denial of service using a specially crafted query. IBM X-Force ID: 272646.

Score

CVSS 3.1 6.5 Medium

Status

Modified - psirt@us.ibm.com

Published

2024-01-22

Last modified

2025-02-13

Weaknesses

CWE-20

Affected products

• Db2 (Ibm)
• Db2 For Linux (Ibm)
• Unix And Windows (Ibm)

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/272646
• https://security.netapp.com/advisory/ntap-20240307-0002/
• https://www.ibm.com/support/pages/node/7105502