CVE-2025-33114
- EPSS 0.04%
- Veröffentlicht 29.07.2025 18:41:15
- Zuletzt bearbeitet 06.08.2025 19:42:05
IBM Db2 for Linux 12.1.0, 12.1.1, and 12.1.2 is vulnerable to denial of service with a specially crafted query under certain non-default conditions.
CVE-2025-33092
- EPSS 0.01%
- Veröffentlicht 29.07.2025 18:36:58
- Zuletzt bearbeitet 06.08.2025 19:37:37
IBM Db2 for Linux 12.1.0, 12.1.1, and 12.1.2 is vulnerable to a stack-based buffer overflow in db2fm, caused by improper bounds checking. A local user could overflow the buffer and execute arbitrary code on the system.
CVE-2025-36071
- EPSS 0.07%
- Veröffentlicht 29.07.2025 18:27:40
- Zuletzt bearbeitet 07.08.2025 00:31:53
IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.2 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query due to improper rel...
CVE-2025-36010
- EPSS 0.06%
- Veröffentlicht 29.07.2025 18:15:28
- Zuletzt bearbeitet 06.08.2025 19:34:24
IBM Db2 for Linux 12.1.0, 12.1.1, and 12.1.2 could allow an unauthenticated user to cause a denial of service due to executable segments that are waiting for each other to release a necessary lock.
CVE-2025-2533
- EPSS 0.04%
- Veröffentlicht 29.07.2025 17:43:32
- Zuletzt bearbeitet 06.08.2025 19:32:11
IBM Db2 for Linux 12.1.0, 12.1.1, and 12.1.2 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query.
CVE-2024-49350
- EPSS 0.08%
- Veröffentlicht 29.05.2025 19:18:06
- Zuletzt bearbeitet 09.06.2025 18:59:11
IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted ...
CVE-2025-2518
- EPSS 0.04%
- Veröffentlicht 29.05.2025 19:14:07
- Zuletzt bearbeitet 09.06.2025 18:59:23
IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query.
CVE-2025-3050
- EPSS 0.04%
- Veröffentlicht 29.05.2025 19:13:06
- Zuletzt bearbeitet 09.06.2025 18:59:36
IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 could allow an authenticated user to cause a denial of service when using Q replication due to the improper allocation of CPU resources.
CVE-2025-1493
- EPSS 0.09%
- Veröffentlicht 05.05.2025 20:57:52
- Zuletzt bearbeitet 16.05.2025 23:15:19
IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 12.1.0 through 12.1.1 could allow an authenticated user to cause a denial of service due to concurrent execution of shared resources.
CVE-2025-0915
- EPSS 0.06%
- Veröffentlicht 05.05.2025 20:56:42
- Zuletzt bearbeitet 03.11.2025 20:17:06
IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 under specific configurations could allow an authenticated user to cause a denial of service due to insufficient release of allocate...