Skip to content
OpenAdvisories
Medium WID-SEC-2025-1675 10 CVEs

IBM DB2: Mehrere Schwachstellen

Published Jul 29, 2025 · Updated Apr 27, 2026 · Revision 6 · de-DE

Vendor: HCL Software Vendor: IBM Product: Commerce Product: Db2 Product: License Metric Tool Product: Security Guardium Product: Tivoli Business Service Manager Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um einen Denial of Service Angriff durchzuführen, und um beliebigen Programmcode auszuführen.

Product

IBM DB2 ist ein relationales Datenbanksystem (RDBS) von IBM.

Vulnerabilities 10

  • High 8.8
    CVE-2025-33186

    NVIDIA AIStore contains a vulnerability in AuthN. A successful exploit of this vulnerability might lead to escalation o…

    NVIDIA AuthN component of NVIDIA AIStore
  • High 7.8
    CVE-2025-33092

    IBM Db2 for Linux code execution

    IBM Db2 for Linux 12.1.0, 12.1.1, and 12.1.2 is vulnerable to a stack-based buffer overflow in db2fm, caused by improper bounds checking. A local user could overflow the buffer and execute arbitrary code on the system.

    IBM Db2
  • High 7.5
    CVE-2025-24970

    SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine

    Netty, an asynchronous, event-driven network application framework, has a vulnerability starting in version 4.1.91.Final and prior to version 4.1.118.Final. When a special crafted packet is received via SslHandler it doesn't correctly handle validation of suc…

    netty netty druid thingsboard-tb-node Ubuntu Wolfi Maven
  • Medium 6.5
    CVE-2024-49828

    IBM Db2 for Linux, UNIX and Windows denial of service

    IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5.0.0 through 10.5.0.11, 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.2 is vulnerable to a denial of service as the server may crash under certain conditions with …

    IBM Db2
  • Medium 6.5
    CVE-2024-51473

    IBM Db2 for Linux, UNIX and Windows denial of service

    IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5.0.0 through 10.5.0.11, 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.2 is vulnerable to a denial of service as the server may crash under certain conditions with …

    IBM Db2
  • Medium 6.5
    CVE-2025-36010

    IBM Db2 for Linux denial of service

    IBM Db2 for Linux 12.1.0, 12.1.1, and 12.1.2 could allow an unauthenticated user to cause a denial of service due to executable segments that are waiting for each other to release a necessary lock.

    IBM Db2
  • Medium 6.5
    CVE-2025-36071

    IBM Db2 denial of service

    IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.2 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query due to improper release of m…

    IBM IBM Db2
  • Medium 5.3
    CVE-2025-2533

    IBM Db2 for Linux denial of service

    IBM Db2 for Linux 12.1.0, 12.1.1, and 12.1.2 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query.

    IBM Db2
  • Medium 5.3
    CVE-2025-33114

    IBM Db2 for Linux denial of service

    IBM Db2 for Linux 12.1.0, 12.1.1, and 12.1.2 is vulnerable to denial of service with a specially crafted query under certain non-default conditions.

    IBM Db2
  • Medium 4.9
    CVE-2024-52894

    IBM Db2 for Linux, UNIX and Windows denial of service

    IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5.0.0 through 10.5.0.11, 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.2 is vulnerable to a denial of service as the server may crash under certain conditions with …

    IBM Db2

Revision history

  1. #6

    Neue Updates von IBM aufgenommen

  2. #5

    Neue Updates von IBM aufgenommen

  3. #4

    Referenz(en) aufgenommen: EUVD-2025-93533

  4. #3

    Neue Updates von HCL und IBM aufgenommen

  5. #2

    Neue Updates von IBM aufgenommen

  6. #1

    Initiale Fassung

References