PT-2026-5456 · Ibm · Db2 For Linux+1

CVE-2025-36407 · Publicado 2026-01-30 · Atualizado 2026-02-09

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) versions 11.5.0 through 11.5.9 IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) versions 12.1.0 through 12.1.3

Description The software may allow a local user to cause a denial of service. This is due to improper neutralization of special elements in data query logic.

Recommendations Update IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) to a version later than 11.5.9. Update IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) to a version later than 12.1.3.

Correção

DoS

Enumeração de Fraquezas

CWE-1284

Identificadores relacionados

CVE-2025-36407

Produtos afetados

Db2 Connect Server

Db2 For Linux

Referências · 9

• https://ibm.com/support/pages/node/7257692 · Correção, Aviso do Fabricante
• https://t.me/CVEtracker/43331 · Publicação no Telegram
• https://cve.org/CVERecord?id=CVE-2025-36407 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2025-36407 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2017354536394908140 · Publicação no Twitter
• https://ubuntu.com/security/CVE-2025-36407 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-36407 · Nota de Segurança
• https://t.me/cveNotify/151417 · Publicação no Telegram
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-36407 · Aviso do Fabricante