Analysis Summary

CVE-2023-29267 CVSS:5.9

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to a denial of service as a trap may occur when selecting from certain types of tables.

CVE-2024-28762 CVSS:5.3

IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query under certain conditions.

CVE-2024-31880 CVSS:5.3

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to a denial of service, under specific configurations, as the server may crash when using a specially crafted SQL statement by an authenticated user.

Impact

• Denial of Service

Indicators of Compromise

CVE

• CVE-2023-29267
• CVE-2024-28762
• CVE-2024-31880

Affected Vendors

Remediation

Refer to IBM Security Advisory for patch, upgrade or suggested workaround information.

CVE-2023-29267

CVE-2024-28762

CVE-2024-31880