CVE-2025-36008 IBM Db2 denial of service

🗓️ 07 Nov 2025 18:57:09Reported by ibmType

Authenticated user can trigger DoS in IBM Db2 11.5.0–11.5.9 and 12.1.0–12.1.3 due to allocation fault.

Reporter	Title	Published	Views	Family All 14
IBM Security Bulletins	Security Bulletin: IBM® Db2® Pacemaker is vulnerable to a denial of service due to improper allocation of resources (CVE-2025-36008)	9 Dec 202519:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Db2 used by IBM Security Verify Governance has multiple vulnerabilities	23 Feb 202612:30	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect Data Virtualization on IBM Software Hub (December 2025)	16 Dec 202506:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities have been identified in IBM® Db2® shipped with IBM WebSphere Remote Server	21 Nov 202519:19	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM Db2 shipped with IBM Guardium Key Lifecycle Manager	10 Dec 202507:46	–	ibm
Circl	CVE-2025-36008	7 Nov 202519:21	–	circl
CNNVD	IBM Db2 安全漏洞	7 Nov 202500:00	–	cnnvd
CNVD	IBM Db2 Denial of Service Vulnerability (CNVD-2025-29175)	12 Nov 202500:00	–	cnvd
CVE	CVE-2025-36008	7 Nov 202518:57	–	cve
EUVD	EUVD-2025-38309	7 Nov 202521:31	–	euvd

[
  {
    "cpes": [
      "cpe:2.3:a:ibm:db2:11.5.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:ibm:db2:11.5.9:*:*:*:*:*:*:*",
      "cpe:2.3:a:ibm:db2:12.1.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:ibm:db2:12.1.3:*:*:*:*:*:*:*"
    ],
    "defaultStatus": "unaffected",
    "product": "Db2",
    "vendor": "IBM",
    "versions": [
      {
        "lessThanOrEqual": "11.5.9",
        "status": "affected",
        "version": "11.5.0",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "12.1.3",
        "status": "affected",
        "version": "12.1.0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
ibm	www.ibm.com/support/pages/node/7250482

07 Nov 2025 18:58Current

CVSS 3.16.5

EPSS0.00075

CWE-770