CVE-2025-2668

Summary

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 - 11.5.9 is vulnerable to a denial of service as the server may crash when an authenticated user creates a specially crafted query.

Affected Software

VendorProductVersion RangeStatus
IBMDb2 for Linux, UNIX and Windows11.5.0 <= 11.5.9affected

Weaknesses

  • CWE-789: CWE-789

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References