Skip to content
OpenAdvisories
Medium WID-SEC-2025-0938 6 CVEs

IBM DB2: Mehrere Schwachstellen ermöglichen Denial of Service

Published May 5, 2025 · Updated Apr 27, 2026 · Revision 5 · de-DE

Vendor: HCL Software Vendor: IBM Product: Commerce Product: Db2 Product: License Metric Tool Product: Tivoli Key Lifecycle Manager Platform: Linux Platform: Windows

Summary

Ein entfernter, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

IBM DB2 ist ein relationales Datenbanksystem (RDBS) von IBM.

Vulnerabilities 6

  • Medium 5.5
    CVE-2024-47535

    Denial of Service attack on windows app using Netty

    Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. An unsafe reading of environment file could potentially cause a denial of service in Netty. When loaded on a…

    netty netty netty sonarqube Ubuntu Wolfi Maven
  • Medium 5.5
    CVE-2025-25193

    Denial of Service attack on windows app using Netty

    Netty, an asynchronous, event-driven network application framework, has a vulnerability in versions up to and including 4.1.118.Final. An unsafe reading of environment file could potentially cause a denial of service in Netty. When loaded on an Windows applic…

    netty netty netty celeborn-0.6 Ubuntu Wolfi Maven
  • Medium 5.3
    CVE-2025-0915

    IBM Db2 denial of service

    IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 under specific configurations could allow an authenticated user to cause a denial of service due to insufficient release of allocated memory reso…

    IBM DB2 for Linux, UNIX and Windows Linux Windows
  • Medium 5.3
    CVE-2025-1000

    IBM Db2 denial of service

    IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 could allow an authenticated user to cause a denial of service when connecting to a z/OS database due to improper handling of automatic client re…

    IBM DB2 for Linux, UNIX and Windows Linux Windows
  • Medium 5.3
    CVE-2025-1493

    IBM Db2 denial of service

    IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 12.1.0 through 12.1.1 could allow an authenticated user to cause a denial of service due to concurrent execution of shared resources.

    IBM DB2 for Linux, UNIX and Windows Linux Windows
  • Medium 5.3
    CVE-2025-1992

    IBM Db2 denial of service

    IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 could allow an authenticated user in federation environment, to cause a denial of service due to insufficient release of allocated memory after u…

    IBM DB2 for Linux, UNIX and Windows Linux Windows

Revision history

  1. #5

    Neue Updates von IBM aufgenommen

  2. #4

    Neue Updates von IBM aufgenommen

  3. #3

    Neue Updates von HCL aufgenommen

  4. #2

    Neue Updates von IBM aufgenommen

  5. #1

    Initiale Fassung

References