High severity8.4NVD Advisory· Published Jul 10, 2023· Updated Jun 17, 2026

CVE-2023-30431

Description

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 db2set is vulnerable to a buffer overflow, caused by improper bounds checking. An attacker could overflow the buffer and execute arbitrary code. IBM X-Force ID: 252184.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

IBM/DB2 Connect Serverllm-fuzzy
Range: 10.5, 11.1, and 11.5
IBM/Db2 for Linux, UNIX and Windowsllm-fuzzy
Range: 10.5, 11.1, and 11.5
IBM/Db2 Recovery Expert for Linux, UNIX and Windowscpe-rescue
Range: 10.5 11.1 ,11.5
IBM/Db23 versions
cpe:2.3:a:ibm:db2:10.5.0.11:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:ibm:db2:10.5.0.11:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:db2:11.1.4.7:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:db2:11.5:*:*:*:*:-:*:*

Patches

Vulnerability mechanics

References

www.ibm.com/support/pages/node/7010565nvdPatchVendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/252184nvdVDB EntryVendor Advisory
security.netapp.com/advisory/ntap-20230731-0007/nvd

News mentions

No linked articles in our index yet.

cvss	0.546
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000