CVE-2024-52894

CVE-2024-52894 affects IBM Db2 for Linux, UNIX and Windows (incl. Db2 Connect Server) with DoS via a specially crafted query, crashing the server under certain conditions. The initial entry lists affected versions: 10.5.0.0–10.5.0.11, 11.1.0–11.1.4.7, 11.5.0–11.5.9, and 12.1.0–12.1.2. IBM securit...

CVE-2025-33114 IBM Db2 for Linux denial of service

IBM Db2 for Linux 12.1.0, 12.1.1, and 12.1.2 is vulnerable to denial of service with a specially crafted query under certain non-default conditions...

CVE-2025-33114

CVE-2025-33114 affects IBM Db2 for Linux 12.1.0–12.1.2 and is described in IBM security bulletins as a denial-of-service condition triggered by a specially crafted query under certain non-default conditions. The root cause is listed as CWE-943: Improper Neutralization of Special Elements in Data ...

CVE-2025-33114 IBM Db2 for Linux denial of service

IBM Db2 for Linux 12.1.0, 12.1.1, and 12.1.2 is vulnerable to denial of service with a specially crafted query under certain non-default conditions...

CVE-2025-33092 IBM Db2 for Linux code execution

IBM Db2 for Linux 12.1.0, 12.1.1, and 12.1.2 is vulnerable to a stack-based buffer overflow in db2fm, caused by improper bounds checking. A local user could overflow the buffer and execute arbitrary code on the system...

CVE-2025-33092

CVE-2025-33092 affects IBM Db2 for Linux 12.1.0, 12.1.1, and 12.1.2, vulnerable to a stack-based buffer overflow in db2fm from improper bounds checking, enabling a local attacker to execute arbitrary code. According to IBM Security Bulletin Node 7240940, remediation is to apply IBM Db2 special bu...

CVE-2025-33092 IBM Db2 for Linux code execution

IBM Db2 for Linux 12.1.0, 12.1.1, and 12.1.2 is vulnerable to a stack-based buffer overflow in db2fm, caused by improper bounds checking. A local user could overflow the buffer and execute arbitrary code on the system...

CVE-2025-33092

IBM Db2 for Linux 12.1.0, 12.1.1, and 12.1.2 is vulnerable to a stack-based buffer overflow in db2fm, caused by improper bounds checking. A local user could overflow the buffer and execute arbitrary code on the system...

CVE-2025-36071 IBM Db2 denial of service

IBM Db2 for Linux, UNIX and Windows includes DB2 Connect Server 11.5.0 through 11.5.9 and 12.1.0 through 12.1.2 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query due to improper release of memory resources...

CVE-2025-36071

CVE-2025-36071 – IBM Db2 family Summary: IBM Db2 for Linux/UNIX/Windows (incl. DB2 Connect Server) is vulnerable to a denial of service where the server may crash under certain crafted queries due to improper release of memory resources. Impact is limited to specific versions and configurations d...

CVE-2025-36071 IBM Db2 denial of service

IBM Db2 for Linux, UNIX and Windows includes DB2 Connect Server 11.5.0 through 11.5.9 and 12.1.0 through 12.1.2 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query due to improper release of memory resources...

CVE-2025-36010

IBM Db2 for Linux 12.1.0, 12.1.1, and 12.1.2 could allow an unauthenticated user to cause a denial of service due to executable segments that are waiting for each other to release a necessary lock...

CVE-2025-2533

IBM Db2 for Linux 12.1.0, 12.1.1, and 12.1.2 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query...

CVE-2025-2533

IBM Db2 for Linux 12.1.0, 12.1.1, and 12.1.2 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query...

CVE-2025-36010

CVE-2025-36010 (IBM Db2 12.1.x) : IBM Db2 for Linux/UNIX/Windows 12.1.0–12.1.2 is vulnerable to an unauthenticated DoS due to a deadlock where executable segments wait for each other to release a lock. IBM’s bulletin notes this affects Linux environments and indicates remediation via a fix in the...

CVE-2025-36010 IBM Db2 for Linux denial of service

IBM Db2 for Linux 12.1.0, 12.1.1, and 12.1.2 could allow an unauthenticated user to cause a denial of service due to executable segments that are waiting for each other to release a necessary lock...

CVE-2025-36010 IBM Db2 for Linux denial of service

IBM Db2 for Linux 12.1.0, 12.1.1, and 12.1.2 could allow an unauthenticated user to cause a denial of service due to executable segments that are waiting for each other to release a necessary lock...

CVE-2025-2533 IBM Db2 for Linux denial of service

IBM Db2 for Linux 12.1.0, 12.1.1, and 12.1.2 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query...

CVE-2025-2533 IBM Db2 for Linux denial of service

IBM Db2 for Linux 12.1.0, 12.1.1, and 12.1.2 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query...

CVE-2025-2533

CVE-2025-2533 affects IBM Db2 for Linux 12.1.0–12.1.2 and may cause a denial of service (server crash) under certain conditions with a specially crafted query. Connected IBM bulletins confirm the issue and indicate remediation via fixes in Db2 12.1.2 (latest) or newer; affected platforms are Linu...