CNNVD-202601-5035 Information

CNNVD ID

CNNVD-202601-5035

CVE-2025-36353

  • CNNVD Published: 2026-01-30

Description (Chinese)

IBM Db2是美国国际商业机器(IBM)公司的一套关系型数据库管理系统。该系统的执行环境主要有UNIX、Linux、IBMi、z/OS以及Windows服务器版本。 IBM Db2 11.5.0版本至11.5.9版本和12.1.0版本至12.1.3版本存在安全漏洞,该漏洞源于本地用户可利用数据查询逻辑中特殊元素中和不当,可能导致拒绝服务。

Description (English)

IBM Db2 is a relationship database management system for the United States International Business Machinery (IBM). The implementation environment for the system is mainly UNIX, Linux, IBMi, z/OS and Windows server versions. Security loopholes exist in IBM Db2 11.5.0 to 11.5.9 and 12.1.0 to 12.1.3, which stem from the inappropriateness of the special elements in the data search logic available to local users and may lead to the denial of services.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

国际商业机器

Published

2026-01-30

Last Modified

2026-02-24

References

https://www.ibm.com/support/pages/node/7257632 https://access.redhat.com/security/cve/cve-2025-36353

Patch

https://www.ibm.com/support/pages/node/7257632

Share on: