PT-2026-5449 · Ibm · Db2 Connect Server+1

Publicado 2026-01-30 · Atualizado 2026-01-31 · CVE-2025-36123

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Média

Vetor base

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) versions 11.5.0 through 11.5.9 IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) versions 12.1.0 through 12.1.3

Description The software may allow a local user to cause a denial of service when copying large tables containing XML data. This is due to improper allocation of system resources.

Recommendations IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) versions 11.5.0 through 11.5.9 should be updated. IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) versions 12.1.0 through 12.1.3 should be updated.

Correção

DoS

Allocation of Resources Without Limits

Enumeração de Fraquezas

CWE-770

Identificadores relacionados

CVE-2025-36123

Produtos afetados

Db2 Connect Server

Ibm Db2 For Linux

Referências · 10

• https://nvd.nist.gov/vuln/detail/CVE-2025-36123 · Nota de Segurança
• https://ubuntu.com/security/CVE-2025-36123 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-36123 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2017354529696584153 · Publicação no Twitter
• https://ibm.com/support/pages/node/7257627 · Correção, Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2025-36123 · Aviso do Fabricante
• https://twitter.com/VulmonFeeds/status/2017408470673219890 · Publicação no Twitter
• https://t.me/cveNotify/150475 · Publicação no Telegram
• https://cve.org/CVERecord?id=CVE-2025-36123 · Nota de Segurança
• https://t.me/CVEtracker/43338 · Publicação no Telegram