CVE-2023-25930: IBM Db2 denial of service
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.1, 11.1, and 11.5 is vulnerable to a denial of service. Under rare conditions, setting a special register may cause the Db2 server to terminate abnormally. IBM X-Force ID: 247862.
Other sources
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) is vulnerable to a denial of service. Under rare conditions, setting a special register may cause the Db2 server to terminate abnormally.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-25930 vulnerability?
CVE-2023-25930 is a vulnerability in IBM Db2 for Linux, UNIX, and Windows that can be exploited to cause a denial of service.
How can the IBM Db2 for Linux, UNIX, and Windows vulnerability be exploited?
The vulnerability can be exploited by setting a special register, which may cause the Db2 server to terminate abnormally.
What is the severity of CVE-2023-25930?
CVE-2023-25930 has a severity rating of 5.9 (medium).
Which versions of IBM Db2 for Linux, UNIX, and Windows are affected by CVE-2023-25930?
IBM Db2 versions 10.1, 11.1, and 11.5 are affected by CVE-2023-25930.
How can I fix the vulnerability in IBM Db2 for Linux, UNIX, and Windows?
To fix the vulnerability, it is recommended to apply the latest security patches and updates provided by IBM.