IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5.0.0 through 10.5.0.11, 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.2 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query.
2025-07-29T19:15:44.507
2025-08-13T19:17:34.260
Analyzed
CVSSv3.1: 6.5 (MEDIUM)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | ibm | db2 | ≤ 10.5.0.11 | Yes |
| Application | ibm | db2 | ≤ 10.5.0.11 | Yes |
| Application | ibm | db2 | ≤ 10.5.0.11 | Yes |
| Application | ibm | db2 | ≤ 11.1.4.7 | Yes |
| Application | ibm | db2 | ≤ 11.1.4.7 | Yes |
| Application | ibm | db2 | ≤ 11.1.4.7 | Yes |
| Application | ibm | db2 | ≤ 11.5.9 | Yes |
| Application | ibm | db2 | ≤ 11.5.9 | Yes |
| Application | ibm | db2 | ≤ 11.5.9 | Yes |
| Application | ibm | db2 | ≤ 12.1.2 | Yes |
| Application | ibm | db2 | ≤ 12.1.2 | Yes |
| Application | ibm | db2 | ≤ 12.1.2 | Yes |