CVE-2025-33114

CVE-2025-33114 affects IBM Db2 for Linux 12.1.0–12.1.2 and is described in IBM security bulletins as a denial-of-service condition triggered by a specially crafted query under certain non-default conditions. The root cause is listed as CWE-943: Improper Neutralization of Special Elements in Data ...

CVE-2025-33092

CVE-2025-33092 affects IBM Db2 for Linux 12.1.0, 12.1.1, and 12.1.2, vulnerable to a stack-based buffer overflow in db2fm from improper bounds checking, enabling a local attacker to execute arbitrary code. According to IBM Security Bulletin Node 7240940, remediation is to apply IBM Db2 special bu...

CVE-2025-33092 IBM Db2 for Linux code execution

IBM Db2 for Linux 12.1.0, 12.1.1, and 12.1.2 is vulnerable to a stack-based buffer overflow in db2fm, caused by improper bounds checking. A local user could overflow the buffer and execute arbitrary code on the system...

CVE-2025-2533

IBM Db2 for Linux 12.1.0, 12.1.1, and 12.1.2 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query...

CVE-2025-36010 IBM Db2 for Linux denial of service

IBM Db2 for Linux 12.1.0, 12.1.1, and 12.1.2 could allow an unauthenticated user to cause a denial of service due to executable segments that are waiting for each other to release a necessary lock...

CVE-2025-2533

CVE-2025-2533 affects IBM Db2 for Linux 12.1.0–12.1.2 and may cause a denial of service (server crash) under certain conditions with a specially crafted query. Connected IBM bulletins confirm the issue and indicate remediation via fixes in Db2 12.1.2 (latest) or newer; affected platforms are Linu...

Security Bulletin: IBM® Db2® federated server is affected by a vulnerability in the netty library (CVE-2025-24970)

Summary Netty, an asynchronous, event-driven network application framework, has a vulnerability starting in version 4.1.91.Final and prior to version 4.1.118.Final. When a special crafted packet is received via SslHandler it doesn't correctly handle validation of such a packet in all cases which...

PT-2025-31255 · Ibm · Db2 Connect Server +1

Name of the Vulnerable Software and Affected Versions: IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server versions 10.5.0.0 through 10.5.0.11 IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server versions 11.1.0 through 11.1.4.7 IBM Db2 for Linux, UNIX and Windows includes...

Security Bulletin: IBM® Db2® is vulnerable to a denial of service under certain conditions. (CVE-2025-1493)

Summary IBM® Db2® is vulnerable to a denial of service due to concurrent execution of shared resources. Vulnerability Details CVEID:CVE-2025-1493 DESCRIPTION: IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server could allow an authenticated user to cause a denial of service due to...

Security Bulletin: IBM® Db2® is vulnerable to a denial of service due to insufficient release of allocated memory after usage. (CVE-2025-1992)

Summary IBM® Db2® is vulnerable to a denial of service due to insufficient release of allocated memory after usage under federation configuration. Vulnerability Details CVEID:CVE-2025-1992 DESCRIPTION: IBM Db2 for Linux, UNIX and Windows includes DB2 Connect Server could allow an authenticated us...

Security Bulletin: IBM® Db2® is affected by a vulnerability in protobuf-java (CVE-2022-3510, CVE-2022-3509, CVE-2022-3171).

Summary protobuf-java core and lite are vulnerable to a denial of service, caused by a flaw in the parsing procedure for binary and text format data. By sending non-repeated embedded messages with repeated or unknown fields, a remote authenticated attacker could exploit this vulnerability to caus...

Security Bulletin: IBM® Db2® is vulnerable to a denial of service under certain conditions (CVE-2025-3050).

Summary IBM Db2 for Linux, UNIX and Windows includes DB2 Connect Server could allow an authenticated user to cause a denial of service when using Q replication due to the improper allocation of CPU resources. Vulnerability Details CVEID:CVE-2025-3050 DESCRIPTION: IBM Db2 for Linux, UNIX and Windo...

IBM DB2 DoS (7235069) (Unix)

According to it self-reported version number, IBM Db2 is affected by a remote code execution vulnerability as a database administrator of one database may execute code or read/write files from another database within the same instance. Note that Nessus has not tested for this issue but has instea...

IBM DB2 DoS (7235069) (Windows)

According to it self-reported version number, IBM Db2 is affected by a remote code execution vulnerability as a database administrator of one database may execute code or read/write files from another database within the same instance. Note that Nessus has not tested for this issue but has instea...

CVE-2025-2518

IBM Db2 for Linux, UNIX and Windows includes DB2 Connect Server 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query...

CVE-2024-49350

IBM Db2 for Linux, UNIX and Windows includes DB2 Connect Server 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query...

CVE-2024-49350

IBM Db2 for Linux, UNIX and Windows includes DB2 Connect Server 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query...

CVE-2025-2518 IBM Db2 denial of service

IBM Db2 for Linux, UNIX and Windows includes DB2 Connect Server 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query...

CVE-2025-2518

CVE-2025-2518 affects IBM Db2 for Linux, UNIX and Windows (including Db2 Connect Server) in releases 11.5.0–11.5.9 and 12.1.0–12.1.1, where a specially crafted query may cause the server to crash (DoS). IBM/Security Bulletin notes an interim fix: special build 58840 for V11.5 and V12.1. Upgrading...

CVE-2024-31882

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 11.1 and 11.5 is vulnerable to a denial of service, under specific non default configurations, as the server may crash when using a specially crafted SQL statement by an authenticated user. IBM X-Force ID: 287614...