gsd-2023-30987
Vulnerability from gsd
Modified
2023-12-13 01:20
Details
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on certain databases. IBM X-Force ID: 253440.
Aliases
Aliases
{ GSD: { alias: "CVE-2023-30987", id: "GSD-2023-30987", }, gsd: { metadata: { exploitCode: "unknown", remediation: "unknown", reportConfidence: "confirmed", type: "vulnerability", }, osvSchema: { aliases: [ "CVE-2023-30987", ], details: "IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on certain databases. IBM X-Force ID: 253440.", id: "GSD-2023-30987", modified: "2023-12-13T01:20:52.425420Z", schema_version: "1.4.0", }, }, namespaces: { "cve.org": { CVE_data_meta: { ASSIGNER: "psirt@us.ibm.com", ID: "CVE-2023-30987", STATE: "PUBLIC", }, affects: { vendor: { vendor_data: [ { product: { product_data: [ { product_name: "Db2 for Linux, UNIX and Windows", version: { version_data: [ { version_affected: "=", version_value: "10.5, 11.1 ,11.5", }, ], }, }, ], }, vendor_name: "IBM", }, ], }, }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "eng", value: "IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on certain databases. IBM X-Force ID: 253440.", }, ], }, generator: { engine: "Vulnogram 0.1.0-dev", }, impact: { cvss: [ { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 5.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "LOW", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, ], }, problemtype: { problemtype_data: [ { description: [ { cweId: "CWE-20", lang: "eng", value: "CWE-20 Improper Input Validation", }, ], }, ], }, references: { reference_data: [ { name: "https://www.ibm.com/support/pages/node/7047560", refsource: "MISC", url: "https://www.ibm.com/support/pages/node/7047560", }, { name: "https://exchange.xforce.ibmcloud.com/vulnerabilities/253440", refsource: "MISC", url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/253440", }, { name: "https://security.netapp.com/advisory/ntap-20231116-0006/", refsource: "MISC", url: "https://security.netapp.com/advisory/ntap-20231116-0006/", }, ], }, source: { discovery: "UNKNOWN", }, }, "nvd.nist.gov": { cve: { configurations: [ { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:a:ibm:db2:*:*:*:*:*:*:*:*", matchCriteriaId: "65161064-A4A3-48E5-AC0A-388429FF2F53", versionEndExcluding: "11.5.8", versionStartIncluding: "11.5", vulnerable: true, }, { criteria: "cpe:2.3:a:ibm:db2:10.5:-:*:*:*:*:*:*", matchCriteriaId: "190AE881-F7BF-486E-BDAE-197337D70CDB", vulnerable: true, }, { criteria: "cpe:2.3:a:ibm:db2:10.5:fp1:*:*:*:*:*:*", matchCriteriaId: "8D1BAA43-4C77-4AC7-8561-93EDE0AED000", vulnerable: true, }, { criteria: "cpe:2.3:a:ibm:db2:10.5:fp2:*:*:*:*:*:*", matchCriteriaId: "87C39880-D0E9-4487-9A80-B4D1A999032F", vulnerable: true, }, { criteria: "cpe:2.3:a:ibm:db2:10.5:fp3:*:*:*:*:*:*", matchCriteriaId: "8842A8B6-E470-4536-AB5D-DA1C62A05F58", vulnerable: true, }, { criteria: "cpe:2.3:a:ibm:db2:10.5:fp3a:*:*:*:*:*:*", matchCriteriaId: "92BF0482-E4FE-454E-84DD-27074097F3F3", vulnerable: true, }, { criteria: "cpe:2.3:a:ibm:db2:10.5:fp4:*:*:*:*:*:*", matchCriteriaId: "3705A79B-7903-4055-9CDC-55D60D2AC2E4", vulnerable: true, }, { criteria: "cpe:2.3:a:ibm:db2:10.5:fp5:*:*:*:*:*:*", matchCriteriaId: "CBDFCE61-EE04-4901-844D-61B8966C1B81", vulnerable: true, }, { criteria: "cpe:2.3:a:ibm:db2:10.5:fp6:*:*:*:*:*:*", matchCriteriaId: "53A23363-413D-4785-B8C1-9AC2F96000EB", vulnerable: true, }, { criteria: "cpe:2.3:a:ibm:db2:10.5:fp7:*:*:*:*:*:*", matchCriteriaId: "6E22D884-A33F-41D7-84CB-B6360A39863F", vulnerable: true, }, { criteria: "cpe:2.3:a:ibm:db2:10.5:fp8:*:*:*:*:*:*", matchCriteriaId: "4DA56D35-93E9-4659-B180-2FD636A39BAB", vulnerable: true, }, { criteria: "cpe:2.3:a:ibm:db2:10.5:fp9:*:*:*:*:*:*", matchCriteriaId: "6E7F0B02-EA0B-4BD1-AA0C-2A4735221963", vulnerable: true, }, { criteria: "cpe:2.3:a:ibm:db2:11.1.4:-:*:*:*:*:*:*", matchCriteriaId: "7F91EC14-CD9A-42EB-9D81-6025A1D74749", vulnerable: true, }, { criteria: "cpe:2.3:a:ibm:db2:11.1.4:fp1:*:*:*:*:*:*", matchCriteriaId: "5D098641-0833-4718-BB6A-273E1CA0F887", vulnerable: true, }, { criteria: "cpe:2.3:a:ibm:db2:11.1.4:fp2:*:*:*:*:*:*", matchCriteriaId: "8B451F96-2A58-4758-86E6-F8A030805C51", vulnerable: true, }, { criteria: "cpe:2.3:a:ibm:db2:11.1.4:fp3:*:*:*:*:*:*", matchCriteriaId: "69CBC98E-BECE-41A4-A0D9-9F3AC1602ABE", vulnerable: true, }, { criteria: "cpe:2.3:a:ibm:db2:11.1.4:fp4:*:*:*:*:*:*", matchCriteriaId: "20386F14-BC32-4174-9F3A-F7406486976A", vulnerable: true, }, { criteria: "cpe:2.3:a:ibm:db2:11.1.4:fp5:*:*:*:*:*:*", matchCriteriaId: "DD0DD54B-AB2E-4C56-B348-FF87C174270A", vulnerable: true, }, { criteria: "cpe:2.3:a:ibm:db2:11.1.4:fp6:*:*:*:*:*:*", matchCriteriaId: "CC14EF40-FE00-47F9-8A78-98713F903D9C", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", matchCriteriaId: "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1", vulnerable: false, }, { criteria: "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", matchCriteriaId: "A2572D17-1DE6-457B-99CC-64AFD54487EA", vulnerable: false, }, { criteria: "cpe:2.3:o:opengroup:unix:-:*:*:*:*:*:*:*", matchCriteriaId: "6A90CB3A-9BE7-475C-9E75-6ECAD2106302", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, ], descriptions: [ { lang: "en", value: "IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on certain databases. IBM X-Force ID: 253440.", }, { lang: "es", value: "IBM Db2 para Linux, UNIX y Windows (incluyendo Db2 Connect Server) 10.5, 11.1 y 11.5 es vulnerable a la Denegación de Servicio con una consulta especialmente manipulada en determinadas bases de datos. ID de IBM X-Force: 253440.", }, ], id: "CVE-2023-30987", lastModified: "2023-12-22T21:07:56.470", metrics: { cvssMetricV31: [ { cvssData: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, exploitabilityScore: 3.9, impactScore: 3.6, source: "nvd@nist.gov", type: "Primary", }, { cvssData: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 5.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "LOW", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, exploitabilityScore: 1.6, impactScore: 3.6, source: "psirt@us.ibm.com", type: "Secondary", }, ], }, published: "2023-10-16T21:15:10.627", references: [ { source: "psirt@us.ibm.com", tags: [ "VDB Entry", "Vendor Advisory", ], url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/253440", }, { source: "psirt@us.ibm.com", tags: [ "Third Party Advisory", ], url: "https://security.netapp.com/advisory/ntap-20231116-0006/", }, { source: "psirt@us.ibm.com", tags: [ "Patch", "Vendor Advisory", ], url: "https://www.ibm.com/support/pages/node/7047560", }, ], sourceIdentifier: "psirt@us.ibm.com", vulnStatus: "Analyzed", weaknesses: [ { description: [ { lang: "en", value: "NVD-CWE-noinfo", }, ], source: "nvd@nist.gov", type: "Primary", }, { description: [ { lang: "en", value: "CWE-20", }, ], source: "psirt@us.ibm.com", type: "Secondary", }, ], }, }, }, }
Log in or create an account to share your comment.
Security Advisory comment format.
This schema specifies the format of a comment related to a security advisory.
Title of the comment
Description of the comment
Loading…
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.