CVE-2024-31880

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to a denial of service, under specific configurations, as the server may crash when using a specially crafted SQL statement by an authenticated user.
References
Link Resource
https://www.ibm.com/support/pages/node/7156851 Vendor Advisory
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:ibm:db2:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:*:*:*:*:*:-:*:*
OR cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
cpe:2.3:o:opengroup:unix:-:*:*:*:*:*:*:*

History

06 Nov 2024, 20:39

Type Values Removed Values Added
First Time Opengroup
Ibm db2
Microsoft windows
Linux
Linux linux Kernel
Opengroup unix
Microsoft
Ibm
CVSS v2 : unknown
v3 : 5.3
v2 : unknown
v3 : 6.5
References () https://www.ibm.com/support/pages/node/7156851 - () https://www.ibm.com/support/pages/node/7156851 - Vendor Advisory
CPE cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
cpe:2.3:o:opengroup:unix:-:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:*:*:*:*:*:-:*:*
cpe:2.3:a:ibm:db2:*:*:*:*:*:*:*:*

23 Oct 2024, 15:12

Type Values Removed Values Added
Summary
  • (es) IBM Db2 para Linux, UNIX y Windows (incluye Db2 Connect Server) 10.5, 11.1 y 11.5 es vulnerable a una denegación de servicio, en configuraciones específicas, ya que el servidor puede bloquearse al utilizar una declaración SQL especialmente manipulada por un usuario autenticado.

23 Oct 2024, 02:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-10-23 02:15

Updated : 2024-11-06 20:39


NVD link : CVE-2024-31880

Mitre link : CVE-2024-31880

CVE.ORG link : CVE-2024-31880


JSON object : View

Products Affected

linux

  • linux_kernel

microsoft

  • windows

opengroup

  • unix

ibm

  • db2
CWE
CWE-770

Allocation of Resources Without Limits or Throttling