CVE-2023-26021

published 2023-04-28

CVE-2023-26021: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 is vulnerable to a denial of service as the server may crash when compiling a…

high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C N I N A H

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 is vulnerable to a denial of service as the server may crash when compiling a specially crafted SQL query using a LIMIT clause. IBM X-Force ID: 247864.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
ibm	db2	—	—
ibm	db2	>= 11.1 < 11.1.4	11.1.4
ibm	db2	>= 11.5 < 11.5.8	11.5.8

CWE-20