CVE-2024-52894

CVE-2024-52894 affects IBM Db2 for Linux, UNIX and Windows (incl. Db2 Connect Server) with DoS via a specially crafted query, crashing the server under certain conditions. The initial entry lists affected versions: 10.5.0.0–10.5.0.11, 11.1.0–11.1.4.7, 11.5.0–11.5.9, and 12.1.0–12.1.2. IBM securit...

CVE-2025-36071 IBM Db2 denial of service

IBM Db2 for Linux, UNIX and Windows includes DB2 Connect Server 11.5.0 through 11.5.9 and 12.1.0 through 12.1.2 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query due to improper release of memory resources...

CVE-2025-36071

CVE-2025-36071 – IBM Db2 family Summary: IBM Db2 for Linux/UNIX/Windows (incl. DB2 Connect Server) is vulnerable to a denial of service where the server may crash under certain crafted queries due to improper release of memory resources. Impact is limited to specific versions and configurations d...

CVE-2025-2533 IBM Db2 for Linux denial of service

IBM Db2 for Linux 12.1.0, 12.1.1, and 12.1.2 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query...

CVE-2025-2533

CVE-2025-2533 affects IBM Db2 for Linux 12.1.0–12.1.2 and may cause a denial of service (server crash) under certain conditions with a specially crafted query. Connected IBM bulletins confirm the issue and indicate remediation via fixes in Db2 12.1.2 (latest) or newer; affected platforms are Linu...

PT-2025-31250 · Ibm · Ibm Db2 For Linux +1

Name of the Vulnerable Software and Affected Versions: IBM Db2 for Linux, UNIX and Windows includes DB2 Connect Server versions 11.5.0 through 11.5.9 IBM Db2 for Linux, UNIX and Windows includes DB2 Connect Server versions 12.1.0 through 12.1.2 Description: The software is susceptible to a denial...

PT-2025-31254 · Ibm · Ibm Db2 For Linux +1

Name of the Vulnerable Software and Affected Versions: IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server versions 10.5.0.0 through 10.5.0.11 IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server versions 11.1.0 through 11.1.4.7 IBM Db2 for Linux, UNIX and Windows includes...

PT-2025-31255 · Ibm · Db2 Connect Server +1

Name of the Vulnerable Software and Affected Versions: IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server versions 10.5.0.0 through 10.5.0.11 IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server versions 11.1.0 through 11.1.4.7 IBM Db2 for Linux, UNIX and Windows includes...

IBM Db2 for Linux 安全漏洞

IBM Db2 for Linux is a relational database management system developed by IBM and designed for the Linux operating system to provide high-performance, highly reliable data storage and management services. A denial of service vulnerability exists in IBM DB2 for Linux, which can be exploited by an...

IBM Db2 安全漏洞

IBM Db2 is a relational database management system from International Business Machines IBM. The system is executed on UNIX, Linux, IBMi, z/OS, and Windows server versions. A security vulnerability exists in IBM Db2 versions 10.5.0.11 and earlier, 11.1.4.7 and earlier, 11.5.9 and earlier, and...

IBM Db2 安全漏洞

IBM Db2 is a relational database management system from International Business Machines IBM. The system is executed on UNIX, Linux, IBMi, z/OS, and Windows server versions. A security vulnerability exists in IBM Db2 versions 10.5.0.11 and earlier, 11.1.4.7 and earlier, 11.5.9 and earlier, and...

NewStart CGSL MAIN 7.02 : yajl Vulnerability (NS-SA-2025-0202)

The remote NewStart CGSL host, running version MAIN 7.02, has yajl packages installed that are affected by a vulnerability: - There's a memory leak in yajl 2.1.0 with use of yajltreeparse function. which will cause out-of-memory in server and cause crash. CVE-2023-33460 Note that Nessus has not...

libssh 输入验证错误漏洞

libssh is a C development package from the libssh organization for accessing SSH services, which are capable of executing remote commands, file transfers, as well as providing a secure transport channel for remote programs. An input validation error vulnerability exists in libssh that stems from ...

SUSE CVE-2025-8114

A flaw was found in libssh, a library that implements the SSH protocol. When calculating the session ID during the key exchange KEX process, an allocation failure in cryptographic functions may lead to a NULL pointer dereference. This issue can cause the client or server to crash...

CVE-2025-8114

A flaw was found in libssh, a library that implements the SSH protocol. When calculating the session ID during the key exchange KEX process, an allocation failure in cryptographic functions may lead to a NULL pointer dereference. This issue can cause the client or server to crash...

UBUNTU-CVE-2025-8114

A flaw was found in libssh, a library that implements the SSH protocol. When calculating the session ID during the key exchange KEX process, an allocation failure in cryptographic functions may lead to a NULL pointer dereference. This issue can cause the client or server to crash...

CVE-2025-8114

A flaw was found in libssh, a library that implements the SSH protocol. When calculating the session ID during the key exchange KEX process, an allocation failure in cryptographic functions may lead to a NULL pointer dereference. This issue can cause the client or server to crash...

CVE-2025-8114 Libssh: null pointer dereference in libssh kex session id calculation

A flaw was found in libssh, a library that implements the SSH protocol. When calculating the session ID during the key exchange KEX process, an allocation failure in cryptographic functions may lead to a NULL pointer dereference. This issue can cause the client or server to crash...

EulerOS 2.0 SP12 : libsoup (EulerOS-SA-2025-1829)

According to the versions of the libsoup packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in libsoup. A vulnerability in snifffeedorhtml and skipinsignificantspace functions may lead to a heap buffer...

GHSA-7XQM-7738-642X File Browser's Uncontrolled Memory Consumption vulnerability can enable DoS attack due to oversized file processing

Summary A Denial of Service DoS vulnerability exists in the file processing logic when reading a file on endpoint Filebrowser-Server-IP:PORT/files/file-name . While the server correctly handles and stores uploaded files, it attempts to load the entire content into memory during read operations...