CVE-2023-29255: IBM DB2 for Linux, UNIX and Windows denial of service
Published Apr 24, 2023
·Updated
IBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to a denial of service as it may trap when compiling a variation of an anonymous block. IBM X-Force ID: 251991.
Other sources
IBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server) is vulnerable to a denial of service as it may trap when compiling a variation of an anonymous block.
— IBM
Affected Software
23 affected components
IBM DB2>=11.1<11.1.4
IBM DB2>=11.5<11.5.8
IBM DB2=10.5
IBM DB2=10.5-fp1
IBM DB2=10.5-fp10
IBM DB2=10.5-fp2
IBM DB2=10.5-fp3
IBM DB2=10.5-fp3a
IBM DB2=10.5-fp4
IBM DB2=10.5-fp5
IBM DB2=10.5-fp6
IBM DB2=10.5-fp7
IBM DB2=10.5-fp8
IBM DB2=10.5-fp9
IBM DB2=11.1.4
IBM DB2=11.1.4-fp1
IBM DB2=11.1.4-fp2
IBM DB2=11.1.4-fp3
IBM DB2=11.1.4-fp4
IBM DB2=11.1.4-fp5
IBM DB2=11.1.4-fp6
Linux Linux kernel
Microsoft Windows
Remediation
Patch Available
Event History
Apr 24, 2023
CVE Published
via IBM·12:00 AM
Data Sourced
via IBM·12:00 AM
DescriptionSeverityAffected Software
Apr 27, 2023
CVE Published
via MITRE·12:47 PM
Data Sourced
via MITRE·12:47 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-29255?
The severity of CVE-2023-29255 is high with a score of 7.5.
2
Which versions of IBM DB2 for Linux, UNIX, and Windows are affected by CVE-2023-29255?
IBM DB2 versions 10.5, 11.1, and 11.5 are affected by CVE-2023-29255.
3
How can I fix CVE-2023-29255?
To fix CVE-2023-29255, update IBM DB2 to a version that is not affected by the vulnerability.
4
Is Linux Linux kernel or Microsoft Windows affected by CVE-2023-29255?
No, Linux Linux kernel and Microsoft Windows are not affected by CVE-2023-29255.
5
What is the Common Weakness Enumeration (CWE) ID of CVE-2023-29255?
The CWE ID of CVE-2023-29255 is 20.