"
#SecurityBulletin: IBM Db2 Vulnerabilities Alert!
"
IBM has released a security bulletin detailing multiple vulnerabilities in IBM Db2, which is shipped with IBM WebSphere Remote Server. These vulnerabilities range from denial of service attacks to information disclosure vulnerabilities. Some of the notable CVEs include:
- CVE-2023-39976: A vulnerability in libqb affecting IBM® Db2® High-Availability deployments using Pacemaker.
- CVE-2023-40373: IBM® Db2® is vulnerable to denial of service with a specially crafted query containing common table expressions.
- CVE-2023-40372: IBM® Db2® is vulnerable to denial of service with a specially crafted SQL statement using External Tables.
- CVE-2023-33850: IBM® Db2® has an information disclosure vulnerability due to the consumed GSKit library.
IBM urges users to address these vulnerabilities by upgrading the affected products. For a detailed breakdown and remediation steps, refer to the official IBM Security Bulletin.
Tags: #IBM #Db2 #WebSphere #SecurityBulletin #Vulnerabilities #CyberSecurity #DenialOfService #InformationDisclosure 

