CVE-2023-27555: IBM Db2 denial of service

Q: What is the vulnerability ID of this vulnerability?

The vulnerability ID of this vulnerability is CVE-2023-27555.

Q: What is the severity of CVE-2023-27555?

CVE-2023-27555 has a severity rating of 7.5, which is considered high.

Q: Which software versions are affected by CVE-2023-27555?

IBM Db2 for Linux, UNIX, and Windows versions 11.5 and lower, as well as version 10.5, are affected by CVE-2023-27555.

Q: How can I fix the vulnerability CVE-2023-27555?

To fix CVE-2023-27555, update your IBM Db2 for Linux, UNIX, and Windows software to a version that is not affected by the vulnerability.

Q: Where can I find more information about CVE-2023-27555?

You can find more information about CVE-2023-27555 on the IBM X-Force ID website at https://exchange.xforce.ibmcloud.com/vulnerabilities/249187.

Published Apr 24, 2023

Updated

IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5 is vulnerable to a denial of service when attempting to use ACR client affinity for unfenced DRDA federation wrappers. IBM X-Force ID: 249187.

Other sources

IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) is vulnerable to a denial of service when attempting to use ACR client affinity for unfenced DRDA federation wrappers.

— IBM

Affected Software

26 affected components

IBM Cloud Pak for Business Automation<=V22.0.2 - V22.0.2-IF004

IBM Cloud Pak for Business Automation<=V21.0.3 - V21.0.3-IF020

IBM Cloud Pak for Business Automation<=V22.0.1 - V22.0.1-IF006 and later fixesV21.0.2 - V21.0.2-IF012 and later fixesV21.0.1 - V21.0.1-IF007 and later fixesV20.0.1 - V20.0.3 and later fixesV19.0.1 - V19.0.3 and later fixesV18.0.0 - V18.0.2 and later fixes

IBM DB2>=11.1<11.1.4

IBM DB2>=11.5<11.5.8

IBM DB2=10.5

IBM DB2=10.5-fp1

IBM DB2=10.5-fp10

IBM DB2=10.5-fp2

IBM DB2=10.5-fp3

IBM DB2=10.5-fp3a

IBM DB2=10.5-fp4

IBM DB2=10.5-fp5

IBM DB2=10.5-fp6

IBM DB2=10.5-fp7

IBM DB2=10.5-fp8

IBM DB2=10.5-fp9

IBM DB2=11.1.4

IBM DB2=11.1.4-fp1

IBM DB2=11.1.4-fp2

IBM DB2=11.1.4-fp3

IBM DB2=11.1.4-fp4

IBM DB2=11.1.4-fp5

IBM DB2=11.1.4-fp6

Linux Linux kernel

Microsoft Windows

Remediation

Patch Available

https://www.ibm.com/support/pages/node/6985683

Event History

Apr 24, 2023

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionSeverityAffected Software

Apr 28, 2023

CVE Published

via MITRE·05:38 PM

Data Sourced

via MITRE·05:38 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-6998727

Frequently Asked Questions

What is the vulnerability ID of this vulnerability?

The vulnerability ID of this vulnerability is CVE-2023-27555.

What is the severity of CVE-2023-27555?