CVE-2025-36071

🗓️ 31 Jul 2025 19:02:43Reported by redhat.comType

redhatcve

redhatcve🔗 access.redhat.com👁 4 Views

IBM Db2 versions 11.5.0 to 11.5.9 and 12.1.0 to 12.1.2 vulnerable to denial of service attack

Reporter	Title	Published	Views	Family All 16
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities have been identified in IBM Db2 shipped with IBM WebSphere Remote Server	7 Aug 202515:41	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM® Db2® affect IBM® Db2® Big SQL.	23 Jan 202611:02	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect Data Virtualization on IBM Software Hub (August 2025 - Part 2 of 2)	2 Sep 202518:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Db2 used by IBM Security Verify Governance has multiple vulnerabilities	10 Sep 202517:30	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the use of IBM Db2, IBM Cloud Pak System is affected by multiple vulnerabilities	30 Jan 202616:58	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Db2® is vulnerable to denial of service when running federated queries with the certain condition (CVE-2025-36071)	9 Dec 202522:34	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM Db2 shipped with IBM Security Guardium Key Lifecycle Manager	14 Aug 202508:53	–	ibm
BDU FSTEC	The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server lies in the fact that resources are not released after their useful period has ended. This allows attackers to cause service failures.	30 Jul 202500:00	–	bdu_fstec
Circl	CVE-2025-36071	29 Jul 202519:42	–	circl
CNNVD	IBM Db2 安全漏洞	29 Jul 202500:00	–	cnnvd

Source	Link
cve	www.cve.org/CVERecord

26 Sep 2025 09:27Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.16.5 - 7.5

EPSS0.00209

SSVC

ibm db2 vulnerability denial of service memory resource issue server crash