PT-2025-19736 · Ibm · Ibm Db2

Published 2025-05-05 · Updated 2025-08-20 · CVE-2025-1992

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) versions 11.5.0 through 11.5.9 IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) versions 12.1.0 through 12.1.1

Description The issue allows an authenticated user, under non-default configurations, to cause a denial of service due to insufficient release of allocated memory after usage.

Recommendations For versions 11.5.0 through 11.5.9, update to a version that includes the fix for this issue. For versions 12.1.0 through 12.1.1, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to the system to minimize the risk of exploitation.

Fix

DoS

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

BDU:2025-10472

CVE-2025-1992

Affected Products

Ibm Db2

References · 10

• https://bdu.fstec.ru/vul/2025-10472 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-1992 · Security Note
• https://osv.dev/vulnerability/CVE-2025-1992 · Vendor Advisory
• https://security.netapp.com/advisory/ntap-20250516-0002 · Note
• https://t.me/cveNotify/132853 · Telegram Post
• https://t.me/cvedetector/24467 · Telegram Post
• https://t.me/cvetracker/23050 · Telegram Post
• https://ibm.com/support/pages/node/7232515 · Vendor Advisory, Patch
• https://twitter.com/CVEnew/status/1919440494712463703 · Twitter Post
• https://twitter.com/cybercronai/status/1919774333091660046 · Twitter Post