CVE-2022-43929 IBM Db2 for Linux, UNIX and Windows denial of service
Attackers can cause a denial of service in IBM Db2 by executing a specially crafted Load command.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-43929?
CVE-2022-43929 is a medium-severity denial of service vulnerability in Ibm Db2, published on 17 Feb 2023. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
IBM Db2 for Linux, UNIX and Windows 11.1 and 11.5 may be vulnerable to a Denial of Service when executing a specially crafted 'Load' command. IBM X-Force ID: 241676.
Weakness: CWE-20
Which versions are affected by CVE-2022-43929?
It affects 1 product.
Products include Ibm Db2.
How do I fix CVE-2022-43929?
No fix has been published for CVE-2022-43929 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2022-43929 being exploited?
There is no known exploitation of CVE-2022-43929 in the wild and no public exploit code.
Other vulnerabilities in Ibm Db2
Sources
Also known as GHSA-qwmj-m695-7c2c.