CVE-2025-36008: IBM Db2 denial of service
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow an authenticated user to cause a denial of service due to improper allocation of resources.
Other sources
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow an authenticated user to cause a denial of service due to improper allocation of resources.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Db2 V11.5to a version that resolves this vulnerability.Patch DT423510 Special Build #69673 or later - Upgrade
Upgrade
IBM Db2 V12.1to a version that resolves this vulnerability.Patch DT423510 Special Build #70120 or later
Event History
Frequently Asked Questions
What is the severity of CVE-2025-36008?
CVE-2025-36008 has a high severity rating due to its potential to cause denial of service.
How do I fix CVE-2025-36008?
To mitigate CVE-2025-36008, ensure that you upgrade IBM Db2 to the latest patched version that addresses this vulnerability.
What kind of impacts can CVE-2025-36008 have on my system?
CVE-2025-36008 can lead to a denial of service, which may disrupt access to Db2 services for authenticated users.
Who is affected by CVE-2025-36008?
CVE-2025-36008 affects IBM Db2 versions 11.5.0 through 11.5.9 and 12.1.0 through 12.1.3 for Linux, UNIX, and Windows.
Is CVE-2025-36008 exploitable remotely?
CVE-2025-36008 is not remotely exploitable but requires authenticated user access to trigger the denial of service.