CVE-2023-47747: IBM Db2 denial of service
Published Jan 8, 2024
·Updated
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.1, 10.5, and 11.1 could allow an authenticated user with CONNECT privileges to cause a denial of service using a specially crafted query. IBM X-Force ID: 272646.
Affected Software
15 affected components
IBM Data Virtualization on Cloud Pak for Data<=3.0
IBM Watson Query on Cloud Pak for Data<=2.2
IBM Watson Query on Cloud Pak for Data<=2.1
IBM Watson Query on Cloud Pak for Data<=2.0
IBM Data Virtualization on Cloud Pak for Data<=1.8
IBM Data Virtualization on Cloud Pak for Data<=1.7
All of the following
Any of the following
IBM DB2>=10.5.0.0<=10.5.0.11
IBM DB2>=11.1.0.0<=11.1.4.7
IBM DB2>=11.5<=11.5.9
Any of the following
HP HP-UX
IBM AIX
IBM Linux On Ibm Z
Linux Linux kernel
Microsoft Windows
Oracle Solaris
Remediation
Patch Available
Event History
Jan 22, 2024
CVE Published
via MITRE·07:57 PM
Data Sourced
via MITRE·07:57 PM
DescriptionSeverityWeakness
Aug 15, 2025
Data Sourced
via IBM·03:29 PM
DescriptionAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-47747?
CVE-2023-47747 has a notable severity as it can lead to a denial of service.
2
Who is affected by CVE-2023-47747?
CVE-2023-47747 affects IBM DB2 for Linux, UNIX and Windows versions 10.1, 10.5, and 11.1.
3
How do I fix CVE-2023-47747?
To fix CVE-2023-47747, apply the latest patches provided by IBM for the affected versions of DB2.
4
Can an unauthenticated user exploit CVE-2023-47747?
No, CVE-2023-47747 requires an authenticated user with CONNECT privileges to exploit.
5
What kind of attack does CVE-2023-47747 enable?
CVE-2023-47747 enables a denial of service attack via specially crafted queries.