CVE-2024-35152

Summary

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 could allow an authenticated user to cause a denial of service with a specially crafted query due to improper memory allocation. IBM X-Force ID: 292639.

Affected Software

VendorProductVersion RangeStatus
IBMDb2 for Linux, UNIX and Windows11.5affected

Weaknesses

  • CWE-789: CWE-789 Uncontrolled Memory Allocation

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

References