Received
CVE has been recently published to the CVE List and has been received by the NVD.

Products

IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server)

10.5

11.1

11.5

Source

psirt@us.ibm.com

CVE-2024-28762 details

Published : June 12, 2024, 6:15 p.m.
Last Modified : June 12, 2024, 6:15 p.m.

Description

IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query under certain conditions. IBM X-Force ID: 285246.

CVSS Score

1	2	3	4	5.3	6	7	8	9	10

Weakness

Weakness	Name	Description

CVSS Data

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

Base Score

5.3

Exploitability Score

Impact Score

Base Severity

MEDIUM

Vector String : CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

References

URL	Source
https://exchange.xforce.ibmcloud.com/vulnerabilities/285246	psirt@us.ibm.com
https://www.ibm.com/support/pages/node/7156847	psirt@us.ibm.com

This website uses the NVD API, but is not approved or certified by it.

CVE-2024-28762