PT-2025-31250 · Ibm · Ibm Db2 For Linux+1

Published 2025-07-29 · Updated 2025-08-07 · CVE-2025-36071

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) versions 11.5.0 through 11.5.9 IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) versions 12.1.0 through 12.1.2

Description The software is susceptible to a denial of service condition. A specially crafted query can cause the server to crash due to improper release of memory resources.

Recommendations Update IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) to a version later than 11.5.9. Update IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) to a version later than 12.1.2.

Fix

DoS

Missing Release of Resource after Effective Lifetime

Weakness Enumeration

CWE-772

Related Identifiers

BDU:2025-09224

CVE-2025-36071

Affected Products

Db2 Connect Server

Ibm Db2 For Linux

References · 7

• https://osv.dev/vulnerability/CVE-2025-36071 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-09224 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-36071 · Security Note
• https://twitter.com/CVEnew/status/1950274941531623583 · Twitter Post
• https://t.me/cveNotify/131184 · Telegram Post
• https://t.me/CVEtracker/28696 · Telegram Post
• https://ibm.com/support/pages/node/7240955 · Patch, Vendor Advisory