Skip to content
OpenAdvisories
High WID-SEC-2025-1167 4 CVEs

IBM DB2: Mehrere Schwachstellen

Published May 29, 2025 · Updated Apr 27, 2026 · Revision 5 · de-DE

Vendor: HCL Software Vendor: IBM Product: Commerce Product: Db2 Product: License Metric Tool Product: Tivoli Key Lifecycle Manager Platform: Linux Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um einen Denial of Service Angriff durchzuführen, oder beliebigen Programmcode auszuführen.

Product

IBM DB2 ist ein relationales Datenbanksystem (RDBS) von IBM.

Vulnerabilities 4

  • Critical 10.0
    CVE-2025-30065 Public exploit EPSS 44%

    Apache Parquet Java: Arbitrary code execution in the parquet-avro module when reading an Avro schema from a Parquet file metadata

    Schema parsing in the parquet-avro module of Apache Parquet 1.15.0 and previous versions allows bad actors to execute arbitrary code Users are recommended to upgrade to version 1.15.1, which fixes the issue.

    Apache Software Foundation Apache Parquet Java druid druid-compat Wolfi Maven
  • Medium 6.5
    CVE-2024-49350

    IBM Db2 denial of service

    IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query.

    IBM DB2 for Linux, UNIX and Windows Linux Windows
  • Medium 5.3
    CVE-2025-2518

    IBM Db2 denial of service

    IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query.

    IBM DB2 for Linux, UNIX and Windows Linux Windows
  • Medium 5.3
    CVE-2025-3050

    IBM Db2 denial of service

    IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 could allow an authenticated user to cause a denial of service when using Q replication due to the improper allocation of CPU resources.

    IBM DB2 for Linux, UNIX and Windows Linux Windows

Revision history

  1. #5

    Neue Updates von IBM aufgenommen

  2. #4

    Neue Updates von IBM aufgenommen

  3. #3

    Neue Updates von HCL aufgenommen

  4. #2

    Neue Updates von IBM aufgenommen

  5. #1

    Initiale Fassung

References