CVE-2024-52903 IBM Db2 denial of service

🗓️ 01 May 2025 22:15:48Reported by ibmType

IBM Db2 versions 12.1.0 and 12.1.1 are vulnerable to denial of service from crafted queries.

Reporter	Title	Published	Views	Family All 16
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM® Db2® affect IBM® Db2® Big SQL	23 Jan 202610:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Db2® is vulnerable to a denial of service under specific conditions (CVE-2024-52903)	23 Jul 202515:06	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Db2 may affect IBM Storage Protect Server.	5 Dec 202513:42	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM Db2 shipped with IBM Security Guardium Key Lifecycle Manager	20 Jun 202513:41	–	ibm
BDU FSTEC	The vulnerability of IBM DB2 database management systems and IBM DB2 Connect Servers lies in insufficient validation of input data, which allows attackers to trigger service failures.	7 Aug 202500:00	–	bdu_fstec
Circl	CVE-2024-52903	1 May 202523:17	–	circl
CNNVD	IBM Db2 输入验证错误漏洞	1 May 202500:00	–	cnnvd
CVE	CVE-2024-52903	1 May 202522:15	–	cve
Tenable Nessus	IBM DB2 DoS (7232336) (Unix)	13 May 202500:00	–	nessus
Tenable Nessus	IBM DB2 DoS (7232336) (Windows)	13 May 202500:00	–	nessus

[
  {
    "cpes": [
      "cpe:2.3:a:ibm:db2:12.1.0:*:*:*:*:linux:*:*",
      "cpe:2.3:a:ibm:db2:12.1.0:*:*:*:*:unix:*:*",
      "cpe:2.3:a:ibm:db2:12.1.0:*:*:*:*:aix:*:*",
      "cpe:2.3:a:ibm:db2:12.1.0:*:*:*:*:windows:*:*",
      "cpe:2.3:a:ibm:db2:12.1.0:*:*:*:*:z:*:*",
      "cpe:2.3:a:ibm:db2:12.1.1:*:*:*:*:linux:*:*",
      "cpe:2.3:a:ibm:db2:12.1.1:*:*:*:*:unix:*:*",
      "cpe:2.3:a:ibm:db2:12.1.1:*:*:*:*:aix:*:*",
      "cpe:2.3:a:ibm:db2:12.1.1:*:*:*:*:windows:*:*",
      "cpe:2.3:a:ibm:db2:12.1.1:*:*:*:*:z:*:*"
    ],
    "defaultStatus": "unaffected",
    "product": "Db2 for Linux, UNIX and Windows",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "12.1.0"
      },
      {
        "status": "affected",
        "version": "12.1.1"
      }
    ]
  }
]

Source	Link
ibm	www.ibm.com/support/pages/node/7232336

29 Sep 2025 15:26Current

CVSS 3.15.3

EPSS0.00285

CWE-248