CVE-2023-30991

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Oct 16, 2023

Updated: Dec 22, 2023

CWE ID 20

Summary

CVE-2023-30991 is a newly disclosed vulnerability affecting IBM Db2 for Linux, UNIX, and Windows versions 11.1 and 11.5. This issue allows an attacker to execute a denial-of-service (DoS) attack through a specifically crafted query. The vulnerability, tracked as IBM X-Force ID 254037, could result in the targeted database becoming unavailable, impacting the availability and integrity of data processed by the affected system. IBM urges users to apply the available patches as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

IBM DB2

Affected Vendors

IBM Corporation

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/s6QzqI
https://www.cve.org/CVERecord?id=CVE-2023-30991
https://nvd.nist.gov/vuln/detail/CVE-2023-30991

Back to Vulnerability Database