CVE-2022-35637: Medium severity IBM Db2 Linux vulnerability

Published Sep 13, 2022

Updated

IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to a denial of service after entering a malformed SQL statement into the Db2expln tool. IBM X-Force ID: 230823.

Affected Software

14 affected components

IBM Db2 Linux=10.5

IBM Db2 Unix=10.5

IBM Db2 Windows=10.5

IBM Db2 Linux=11.1

IBM Db2 Unix=11.1

IBM Db2 Windows=11.1

IBM Db2 Linux=11.5

IBM Db2 Unix=11.5

IBM Db2 Windows=11.5

HP HP-UX

IBM AIX

Linux Linux kernel

Microsoft Windows

Oracle Solaris

Remediation

Patch Available

https://www.ibm.com/support/pages/node/6618775

Event History

Sep 13, 2022

CVE Published

via MITRE·08:45 PM

Data Sourced

via MITRE·08:45 PM

DescriptionSeverityWeakness

Feb 25, 2026

Data Sourced

via IBM·04:52 PM

DescriptionSeverityAffected Software

Parent advisories

This vulnerability appears in the following advisories.

IBM-6618775

Frequently Asked Questions

What is CVE-2022-35637?

CVE-2022-35637 is a vulnerability in IBM Db2 for Linux, UNIX, and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 that allows for a denial of service attack after entering a malformed SQL statement into the Db2expln tool.

How does CVE-2022-35637 affect IBM Db2?

CVE-2022-35637 affects IBM Db2 for Linux, UNIX, and Windows versions 9.7, 10.1, 10.5, 11.1, and 11.5.

What is the severity of CVE-2022-35637?

CVE-2022-35637 has a severity rating of 6.5 (medium).

How can I fix CVE-2022-35637?

To fix CVE-2022-35637, apply the latest security patch or update provided by IBM for the affected versions of IBM Db2.

Where can I find more information about CVE-2022-35637?

You can find more information about CVE-2022-35637 on the IBM X-Force Exchange website and the IBM support pages.