CNNVD-202601-5030 Information

CNNVD ID

CNNVD-202601-5030

CVE-2025-36387

  • CNNVD Published: 2026-01-30

Description (Chinese)

IBM Db2是美国国际商业机器(IBM)公司的一套关系型数据库管理系统。该系统的执行环境主要有UNIX、Linux、IBMi、z/OS以及Windows服务器版本。 IBM Db2 11.5.0版本至11.5.9版本存在安全漏洞,该漏洞源于处理特制查询时存在缺陷,可能导致经过身份验证的用户发起拒绝服务攻击。

Description (English)

IBM Db2 is a relationship database management system for the United States International Business Machinery (IBM). The implementation environment for the system is mainly UNIX, Linux, IBMi, z/OS and Windows server versions. Security gaps exist between IBM Db2 11.5.0 and 11.5.9, which stem from deficiencies in the handling of unique queries and may lead to denial of service attacks by identified users.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

国际商业机器

Published

2026-01-30

Last Modified

2026-02-24

References

https://www.ibm.com/support/pages/node/7257690 https://access.redhat.com/security/cve/cve-2025-36387

Patch

https://www.ibm.com/support/pages/node/7257690

Share on: