CVE-2024-37071CWE-789

IBM Db2 denial of service

Medium · published December 7, 2024

CVSS v3.1
5.3
EPSS
0%
Percentile
30.6
In the wild
Unconfirmed
What it is

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 could allow an authenticated user to cause a denial of service with a specially crafted query due to improper memory allocation.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00378 · 30.6th percentile
Weakness
CWE-789 · Memory Allocation with Excessive Size Value
Published
2024-12-07T12:53Z
EPSS history
Timeline
  • 07 DEC 12:53Z
    IBM Db2 denial of service
    cvelistv5