CVE-2024-27254

Published: Apr 3, 2024Modified: Jan 31, 2025

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.5, 11.1, and 11.5 federated server is vulnerable to denial of service with a specially crafted query under certain conditions. IBM X-Force ID: 283813.

Affected (9)

Products: Ibm: Db2

Ibm

1 product

Db2

Configuration A

9 vulnerable · 6 platform

Vulnerable Software	Affected Versions
Ibm Db2	Version 10.5
Ibm Db2	Version 10.5
Ibm Db2	Version 10.5
Ibm Db2	Version 11.1
Ibm Db2	Version 11.1
Ibm Db2	Version 11.1
Ibm Db2	Version 11.5
Ibm Db2	Version 11.5
Ibm Db2	Version 11.5

Running on/with	Platform Versions
Hp Hp Ux	All versions
Ibm Aix	All versions
Ibm Linux On Ibm Z	All versions
Linux Linux Kernel	All versions
Microsoft Windows	All versions
Oracle Solaris	All versions