CVE-2025-33114 IBM Db2 for Linux denial of service

IBM Db2 for Linux 12.1.0, 12.1.1, and 12.1.2 is vulnerable to denial of service with a specially crafted query under certain non-default conditions...

CVE-2025-33092

CVE-2025-33092 affects IBM Db2 for Linux 12.1.0, 12.1.1, and 12.1.2, vulnerable to a stack-based buffer overflow in db2fm from improper bounds checking, enabling a local attacker to execute arbitrary code. According to IBM Security Bulletin Node 7240940, remediation is to apply IBM Db2 special bu...

CVE-2025-33092 IBM Db2 for Linux code execution

IBM Db2 for Linux 12.1.0, 12.1.1, and 12.1.2 is vulnerable to a stack-based buffer overflow in db2fm, caused by improper bounds checking. A local user could overflow the buffer and execute arbitrary code on the system...

CVE-2025-33092 IBM Db2 for Linux code execution

IBM Db2 for Linux 12.1.0, 12.1.1, and 12.1.2 is vulnerable to a stack-based buffer overflow in db2fm, caused by improper bounds checking. A local user could overflow the buffer and execute arbitrary code on the system...

CVE-2025-36071 IBM Db2 denial of service

IBM Db2 for Linux, UNIX and Windows includes DB2 Connect Server 11.5.0 through 11.5.9 and 12.1.0 through 12.1.2 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query due to improper release of memory resources...

CVE-2025-36071 IBM Db2 denial of service

IBM Db2 for Linux, UNIX and Windows includes DB2 Connect Server 11.5.0 through 11.5.9 and 12.1.0 through 12.1.2 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query due to improper release of memory resources...

CVE-2025-36071

CVE-2025-36071 – IBM Db2 family Summary: IBM Db2 for Linux/UNIX/Windows (incl. DB2 Connect Server) is vulnerable to a denial of service where the server may crash under certain crafted queries due to improper release of memory resources. Impact is limited to specific versions and configurations d...

CVE-2025-36010

IBM Db2 for Linux 12.1.0, 12.1.1, and 12.1.2 could allow an unauthenticated user to cause a denial of service due to executable segments that are waiting for each other to release a necessary lock...

CVE-2025-2533

IBM Db2 for Linux 12.1.0, 12.1.1, and 12.1.2 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query...

CVE-2025-36010

CVE-2025-36010 (IBM Db2 12.1.x) : IBM Db2 for Linux/UNIX/Windows 12.1.0–12.1.2 is vulnerable to an unauthenticated DoS due to a deadlock where executable segments wait for each other to release a lock. IBM’s bulletin notes this affects Linux environments and indicates remediation via a fix in the...

CVE-2025-36010 IBM Db2 for Linux denial of service

IBM Db2 for Linux 12.1.0, 12.1.1, and 12.1.2 could allow an unauthenticated user to cause a denial of service due to executable segments that are waiting for each other to release a necessary lock...

CVE-2025-36010 IBM Db2 for Linux denial of service

IBM Db2 for Linux 12.1.0, 12.1.1, and 12.1.2 could allow an unauthenticated user to cause a denial of service due to executable segments that are waiting for each other to release a necessary lock...

CVE-2025-2533 IBM Db2 for Linux denial of service

IBM Db2 for Linux 12.1.0, 12.1.1, and 12.1.2 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query...

CVE-2025-2533 IBM Db2 for Linux denial of service

IBM Db2 for Linux 12.1.0, 12.1.1, and 12.1.2 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query...

CVE-2025-2533

CVE-2025-2533 affects IBM Db2 for Linux 12.1.0–12.1.2 and may cause a denial of service (server crash) under certain conditions with a specially crafted query. Connected IBM bulletins confirm the issue and indicate remediation via fixes in Db2 12.1.2 (latest) or newer; affected platforms are Linu...

Security Bulletin: IBM® Db2® federated server is affected by a vulnerability in the netty library (CVE-2025-24970)

Summary Netty, an asynchronous, event-driven network application framework, has a vulnerability starting in version 4.1.91.Final and prior to version 4.1.118.Final. When a special crafted packet is received via SslHandler it doesn't correctly handle validation of such a packet in all cases which...

Security Bulletin: IBM® Db2® is affected by multiple vulnerabilities in expat library.

Summary IBM® Db2® is affected by vulnerabilities in expat library. Vulnerability Details CVEID:CVE-2024-45490 DESCRIPTION: An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for XMLParseBuffer. CWE:CWE-611: Improper Restriction of XML External Entity...

PT-2025-31253 · Ibm · Ibm Db2 For Linux +1

Name of the Vulnerable Software and Affected Versions: IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server versions 10.5.0 through 10.5.0.11 IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server versions 11.1.0 through 11.1.4.7 IBM Db2 for Linux, UNIX and Windows includes Db...

PT-2025-31250 · Ibm · Ibm Db2 For Linux +1

Name of the Vulnerable Software and Affected Versions: IBM Db2 for Linux, UNIX and Windows includes DB2 Connect Server versions 11.5.0 through 11.5.9 IBM Db2 for Linux, UNIX and Windows includes DB2 Connect Server versions 12.1.0 through 12.1.2 Description: The software is susceptible to a denial...

PT-2025-31230 · Ibm · Ibm Db2 For Linux

Name of the Vulnerable Software and Affected Versions: IBM Db2 for Linux versions 12.1.0 through 12.1.2 Description: IBM Db2 for Linux versions 12.1.0, 12.1.1, and 12.1.2 may allow an unauthenticated user to cause a denial of service. This is due to executable segments waiting for each other to...