PT-2025-45492 · Ibm · Ibm Db2

Publicado 2025-11-07 · Atualizado 2025-11-19 · CVE-2025-36006

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions IBM Db2 versions 10.5.0 through 10.5.11 IBM Db2 versions 11.1.0 through 11.1.4.7 IBM Db2 versions 11.5.0 through 11.5.9 IBM Db2 versions 12.1.0 through 12.1.3

Description An authenticated user may be able to cause a denial of service in IBM Db2 due to the improper release of resources after use.

Recommendations Update IBM Db2 to a version later than 10.5.11. Update IBM Db2 to a version later than 11.1.4.7. Update IBM Db2 to a version later than 11.5.9. Update IBM Db2 to a version later than 12.1.3.

Correção

DoS

Improper Resource Release

Enumeração de Fraquezas

CWE-404

Identificadores relacionados

CVE-2025-36006

Produtos afetados

Ibm Db2

Referências · 7

• https://twitter.com/CVEnew/status/1986878287071822030 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-36006 · Nota de Segurança
• https://t.me/CVEtracker/36795 · Publicação no Telegram
• https://ibm.com/support/pages/node/7250479 · Correção, Aviso do Fabricante
• https://twitter.com/VulmonFeeds/status/1986933661669711993 · Publicação no Twitter
• https://t.me/cveNotify/143396 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2025-36006 · Aviso do Fabricante