CVE-2025-36407 IBM Db2 Denial of Service

🗓️ 30 Jan 2026 21:27:41Reported by ibmType

Db2 may allow a local user to cause denial of service via unsafe data query logic.

Reporter	Title	Published	Views	Family All 19
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities have been identified in IBM DB2 shipped with IBM WebSphere Remote Server	10 Feb 202603:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Db2® is vulnerable to a denial of service with a specially crafted query that uses ALTER TABLE operations.(CVE-2025-36407)	17 Feb 202608:00	–	ibm
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilities in IBM DB2 bundled with IBM Application Performance Management products.	17 Feb 202613:36	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM® Db2® affect IBM® Db2® Big SQL on IBM Cloud Pak for Data.	15 May 202614:46	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM Db2 shipped with IBM Guardium Key Lifecycle Manager (SKLM/GKLM)	13 Feb 202608:51	–	ibm
ATTACKERKB	CVE-2025-36407	30 Jan 202621:27	–	attackerkb
Circl	CVE-2025-36407	19 Mar 202600:00	–	circl
CNNVD	IBM Db2 安全漏洞	30 Jan 202600:00	–	cnnvd
CNVD	IBM Db2 Denial of Service Vulnerability (CNVD-2026-14674)	11 Feb 202600:00	–	cnvd
CVE	CVE-2025-36407	30 Jan 202621:27	–	cve

[
  {
    "cpes": [
      "cpe:2.3:a:ibm:db2:11.5.0:*:*:*:*:linux:*:*",
      "cpe:2.3:a:ibm:db2:11.5.0:*:*:*:*:unix:*:*",
      "cpe:2.3:a:ibm:db2:11.5.0:*:*:*:*:aix:*:*",
      "cpe:2.3:a:ibm:db2:11.5.0:*:*:*:*:windows:*:*",
      "cpe:2.3:a:ibm:db2:11.5.0:*:*:*:*:zos:*:*",
      "cpe:2.3:a:ibm:db2:11.5.9:*:*:*:*:linux:*:*",
      "cpe:2.3:a:ibm:db2:11.5.9:*:*:*:*:unix:*:*",
      "cpe:2.3:a:ibm:db2:11.5.9:*:*:*:*:aix:*:*",
      "cpe:2.3:a:ibm:db2:11.5.9:*:*:*:*:windows:*:*",
      "cpe:2.3:a:ibm:db2:11.5.9:*:*:*:*:zos:*:*",
      "cpe:2.3:a:ibm:db2:12.1.0:*:*:*:*:linux:*:*",
      "cpe:2.3:a:ibm:db2:12.1.0:*:*:*:*:unix:*:*",
      "cpe:2.3:a:ibm:db2:12.1.0:*:*:*:*:aix:*:*",
      "cpe:2.3:a:ibm:db2:12.1.0:*:*:*:*:windows:*:*",
      "cpe:2.3:a:ibm:db2:12.1.0:*:*:*:*:zos:*:*",
      "cpe:2.3:a:ibm:db2:12.1.3:*:*:*:*:linux:*:*",
      "cpe:2.3:a:ibm:db2:12.1.3:*:*:*:*:unix:*:*",
      "cpe:2.3:a:ibm:db2:12.1.3:*:*:*:*:aix:*:*",
      "cpe:2.3:a:ibm:db2:12.1.3:*:*:*:*:windows:*:*",
      "cpe:2.3:a:ibm:db2:12.1.3:*:*:*:*:zos:*:*"
    ],
    "defaultStatus": "unaffected",
    "product": "Db2 for Linux, UNIX and Windows",
    "vendor": "IBM",
    "versions": [
      {
        "lessThanOrEqual": "11.5.9",
        "status": "affected",
        "version": "11.5.0",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "12.1.3",
        "status": "affected",
        "version": "12.1.0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
ibm	www.ibm.com/support/pages/node/7257692

10 Feb 2026 21:27Current

CVSS 3.16.5

EPSS0.00036

CWE-1284