CVE-2024-35152

🗓️ 23 May 2025 09:02:51Reported by redhat.comType

Authenticated user can cause denial of service in IBM Db2 for Linux Unix Windows 11.5 due to improper memory allocation.

Reporter	Title	Published	Views	Family All 20
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data	12 Jun 202515:38	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Db2 may affect IBM Storage Protect Server.	13 Dec 202416:34	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Db2 affect IBM Cloud Pak Sytem	6 Nov 202409:54	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities have been identified in IBM Db2 shipped with IBM WebSphere Remote Server	19 Aug 202419:53	–	ibm
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilities in IBM DB2 bundled with IBM Application Performance Management products.	28 Aug 202410:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Db2® is vulnerable to a denial of service when querying certain tables using a specially crafted statement (CVE-2024-35152)	13 Aug 202421:14	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM Db2 shipped with IBM Security Guardium Key Lifecycle Manager	12 Sep 202405:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Db2 and IBM WebSphere Application Server traditional used by IBM Security Verify Governance have multiple vulnerabilities	31 Oct 202414:57	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM® Db2® affect IBM® Db2® Big SQL on IBM Cloud Pak for Data.	23 Jan 202612:45	–	ibm
Circl	CVE-2024-35152	14 Aug 202420:44	–	circl

Source	Link
cve	www.cve.org/CVERecord

03 Oct 2025 15:10Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.16.5

EPSS0.00204

SSVC