CVE-2025-2518

IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query.

Score
CVSS 3.1 7.5 High
Status
Analyzed - psirt@us.ibm.com
Published
2025-05-29
Last modified
2025-08-26
Weaknesses
CWE-789

Affected products

References