PT-2025-45487 · Ibm · Ibm Db2

Published 2025-11-07 · Updated 2025-11-19 · CVE-2025-36136

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions IBM Db2 versions 11.5.0 through 11.5.9 IBM Db2 versions 12.1.0 through 12.1.3

Description The database monitor script in IBM Db2 may incorrectly detect that the instance is still starting under specific conditions, potentially allowing a local user to cause a denial of service.

Recommendations IBM Db2 versions 11.5.0 through 11.5.9 should be updated. IBM Db2 versions 12.1.0 through 12.1.3 should be updated.

Fix

DoS

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2025-36136

Affected Products

Ibm Db2

References · 6

• https://osv.dev/vulnerability/CVE-2025-36136 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-36136 · Security Note
• https://t.me/CVEtracker/36799 · Telegram Post
• https://ibm.com/support/pages/node/7250485 · Patch, Vendor Advisory
• https://t.me/cveNotify/143399 · Telegram Post
• https://twitter.com/CVEnew/status/1986870184557060107 · Twitter Post