How severe is CVE-2024-31882?

CVE-2024-31882 has a CVSS v3 score of 5.3 (MEDIUM).

CVE-2024-31882

Name: db2
Author: ibm

5.3MEDIUM

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 is vulnerable to a denial of service, under specific non default configurations, as the server may crash when using a sp

Published: 8/14/2024Updated: 11/4/2025

Description

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 is vulnerable to a denial of service, under specific non default configurations, as the server may crash when using a specially crafted SQL statement by an authenticated user. IBM X-Force ID: 287614.

AI AnalysisPowered by AI

Affected Products

ibmdb2

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/287614
Vendor Advisory
https://www.ibm.com/support/pages/node/7165338
Vendor Advisory
https://security.netapp.com/advisory/ntap-20240912-0003/