CVE-2024-31880: IBM Db2 denial of service
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to a denial of service, under specific configurations, as the server may crash when using a specially crafted SQL statement by an authenticated user.
Other sources
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) is vulnerable to a denial of service, under specific configurations, as the server may crash when using a specially crafted SQL statement by an authenticated user.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-31880?
CVE-2024-31880 is classified as a denial of service vulnerability affecting specific versions of IBM Db2.
How do I fix CVE-2024-31880?
To fix CVE-2024-31880, update IBM Db2 to the latest version that addresses this vulnerability.
Which versions of IBM Db2 are affected by CVE-2024-31880?
CVE-2024-31880 affects IBM Db2 versions 10.5, 11.1, and 11.5 under specific configurations.
Can CVE-2024-31880 be exploited by unauthenticated users?
No, CVE-2024-31880 can only be exploited by authenticated users using a specially crafted SQL statement.
What type of impact does CVE-2024-31880 have on IBM Db2?
CVE-2024-31880 can lead to a denial of service, causing the IBM Db2 server to crash.