IBM Db2 CVE-2024-31880 DoS Vulnerability Advisory and Patch

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability Description: - Vulnerability Name: IBM Db2 is vulnerable to a denial of service as the server may crash when using a specially crafted statement. (CVE-2024-31880) - Vulnerability Type: Denial of Service (DoS) 2. Affected Products: - IBM Db2 for Linux, UNIX, and Windows (includes Db2 Connect Server) 3. Affected Versions: - V10.5, V11.1, V11.5 4. Remediation: - Customers can download specific fix packages to resolve this vulnerability. - Specific fix package download links and applicable platforms are as follows: - V10.5 FP11: AIX 64-bit, HP-UX 64-bit, Linux 32-bit, x86-32, Linux 64-bit, x86-64, Linux 64-bit, POWER™ big endian, Linux 64-bit, POWER™ little endian, Linux 64-bit, System z®, System z9® or zSeries®, Solaris 64-bit, SPARC, Solaris 64-bit, x86-64, Windows 32-bit, x86, Windows 64-bit, x86 - V11.1 FP7: AIX 64-bit, Linux 32-bit, x86-32, Linux 64-bit, x86-64, Linux 64-bit, POWER™ little endian, Linux 64-bit, System z®, System z9® or zSeries®, Solaris 64-bit, SPARC, Windows 32-bit, x86, Windows 64-bit, x86 - V11.5: AIX 64-bit (for OS7.1) 5. Disclaimer: - IBM does not publicly disclose critical Db2 functionality or replication steps to avoid providing excessive information to any potential malicious attackers. - IBM does not wish to enable malicious attackers to gain sufficient knowledge to exploit the vulnerability. 6. Workarounds and Mitigations: - None 7. Notifications: - You can subscribe to My Notifications to receive important product support alerts. 8. Related Links: - Complete CVSS v3 Guide - Online Calculator v3 - IBM Secure Engineering Web Portal - IBM Product Security Incident Response Blog - Published DB2 for Linux, UNIX, and Windows security vulnerabilities, including special build information This information helps users understand the vulnerability details, affected products and versions, remediation steps, and related security resources.

Goal Reached Thanks to every supporter — we hit 100%!

IBM Db2 CVE-2024-31880 DoS Vulnerability Advisory and Patch

More from this source