CVE-2023-40372

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Oct 17, 2023

Updated: Dec 22, 2023

CWE ID 20

Summary

CVE-2023-40372 refers to a denial-of-service vulnerability impacting IBM Db2 for Linux, UNIX, and Windows versions 11.5. Hackers can exploit this flaw using a maliciously crafted SQL statement that involves External Tables, resulting in service disruption. IBM's X-Force team has assigned ID 263499 to this security issue. This vulnerability poses risks to the availability of affected databases, necessitating prompt patches or mitigations for affected organizations.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

IBM DB2

Affected Vendors

IBM Corporation

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/sWE-j3
https://www.cve.org/CVERecord?id=CVE-2023-40372
https://nvd.nist.gov/vuln/detail/CVE-2023-40372

Back to Vulnerability Database