CNNVD-202601-5022 Information
CNNVD ID
CNNVD-202601-5022
Related CVE
- CNNVD Published: 2026-01-30
Description (Chinese)
IBM Db2是美国国际商业机器（IBM）公司的一套关系型数据库管理系统。该系统的执行环境主要有UNIX、Linux、IBMi、z/OS以及Windows服务器版本。 IBM Db2 11.5.0版本至11.5.9版本和12.1.0版本至12.1.3版本存在安全漏洞，该漏洞源于数据查询逻辑中对特殊元素中和不当，可能导致本地用户发起拒绝服务攻击。
Description (English)
IBM Db2 is a relationship database management system for the United States International Business Machinery (IBM). The implementation environment for the system is mainly UNIX, Linux, IBMi, z/OS and Windows server versions. There is a security loophole between IBM Db2 11.5.0 to 11.5.9 and 12.1.0 to 12.1.3, which stems from the misalignment of special elements in the data search logic and may lead to a denial of service attack by local users.
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
国际商业机器
Published
2026-01-30
Last Modified
2026-02-24
References
https://www.ibm.com/support/pages/node/7257696 https://access.redhat.com/security/cve/cve-2025-36427
Patch
https://www.ibm.com/support/pages/node/7257696
Share on: