PT-2025-45493 · Ibm · Ibm Db2

Published 2025-11-07 · Updated 2025-11-19 · CVE-2025-36008

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions IBM Db2 versions 11.5.0 through 11.5.9 IBM Db2 versions 12.1.0 through 12.1.3

Description An authenticated user can potentially cause a denial of service in IBM Db2 due to improper allocation of resources.

Recommendations IBM Db2 versions prior to 11.5.0 should be updated. IBM Db2 versions 11.5.0 through 11.5.9 should be updated. IBM Db2 versions 12.1.0 through 12.1.3 should be updated.

Fix

DoS

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2025-36008

Affected Products

Ibm Db2

References · 7

• https://osv.dev/vulnerability/CVE-2025-36008 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-36008 · Security Note
• https://ibm.com/support/pages/node/7250482 · Patch, Vendor Advisory
• https://twitter.com/CVEnew/status/1986874738048741432 · Twitter Post
• https://t.me/CVEtracker/36796 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1986931101709795664 · Twitter Post
• https://t.me/cveNotify/143397 · Telegram Post