PT-2026-5447 · Ibm · Db2 For Linux+1

Published 2026-01-30 · Updated 2026-01-31 · CVE-2025-36070

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) versions 11.5.0 through 11.5.9 IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) versions 12.1.0 through 12.1.3

Description The software may experience a denial of service when selecting from specific table types, potentially due to a trap condition.

Recommendations Update IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) to a version later than 12.1.3. Update IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) to a version later than 11.5.9.

Fix

DoS

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2025-36070

Affected Products

Db2 Connect Server

Db2 For Linux

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2025-36070 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-36070 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-36070 · Security Note
• https://osv.dev/vulnerability/CVE-2025-36070 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-36070 · Vendor Advisory
• https://twitter.com/CVEnew/status/2017354527792406553 · Twitter Post
• https://ibm.com/support/pages/node/7257624 · Patch, Vendor Advisory
• https://t.me/cveNotify/150473 · Telegram Post
• https://t.me/CVEtracker/43340 · Telegram Post