CVE-2024-31881

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to a denial of service as the server may crash when using a specially crafted query on certain columnar tables by an authenticated user. IBM X-Force ID: 287613.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ibm:db2:10.5:*:*:*:*:linux:*:*
cpe:2.3:a:ibm:db2:10.5:*:*:*:*:unix:*:*
cpe:2.3:a:ibm:db2:10.5:*:*:*:*:windows:*:*
cpe:2.3:a:ibm:db2:11.1:*:*:*:*:linux:*:*
cpe:2.3:a:ibm:db2:11.1:*:*:*:*:unix:*:*
cpe:2.3:a:ibm:db2:11.1:*:*:*:*:windows:*:*
cpe:2.3:a:ibm:db2:11.5:*:*:*:*:linux:*:*
cpe:2.3:a:ibm:db2:11.5:*:*:*:*:unix:*:*
cpe:2.3:a:ibm:db2:11.5:*:*:*:*:windows:*:*

History

07 Aug 2024, 16:59

Type Values Removed Values Added
CPE cpe:2.3:a:ibm:db2:11.5:*:*:*:*:windows:*:*
cpe:2.3:a:ibm:db2:10.5:*:*:*:*:windows:*:*
cpe:2.3:a:ibm:db2:10.5:*:*:*:*:linux:*:*
cpe:2.3:a:ibm:db2:11.1:*:*:*:*:windows:*:*
cpe:2.3:a:ibm:db2:10.5:*:*:*:*:unix:*:*
cpe:2.3:a:ibm:db2:11.1:*:*:*:*:linux:*:*
cpe:2.3:a:ibm:db2:11.5:*:*:*:*:unix:*:*
cpe:2.3:a:ibm:db2:11.1:*:*:*:*:unix:*:*
cpe:2.3:a:ibm:db2:11.5:*:*:*:*:linux:*:*
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/287613 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/287613 - VDB Entry
References () https://www.ibm.com/support/pages/node/7156852 - () https://www.ibm.com/support/pages/node/7156852 - Vendor Advisory
First Time Ibm
Ibm db2

13 Jun 2024, 18:36

Type Values Removed Values Added
Summary
  • (es) IBM Db2 para Linux, UNIX y Windows (incluye Db2 Connect Server) 10.5, 11.1 y 11.5 es vulnerable a una denegación de servicio ya que el servidor puede fallar cuando un usuario autenticado utiliza una consulta especialmente manipulada en ciertas tablas de columnas. ID de IBM X-Force: 287613.

12 Jun 2024, 19:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-06-12 19:15

Updated : 2024-08-07 16:59


NVD link : CVE-2024-31881

Mitre link : CVE-2024-31881

CVE.ORG link : CVE-2024-31881


JSON object : View

Products Affected

ibm

  • db2
CWE
CWE-770

Allocation of Resources Without Limits or Throttling