PT-2026-5449

CVE-2025-36123

·

Published

2026-01-30

·

Updated

2026-10-09

Description by

CVSS 3.1
6.2
Medium
MetricsAV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) versions 11.5.0 through 11.5.9 IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) versions 12.1.0 through 12.1.3
Description The software may allow a local user to cause a denial of service when copying large tables containing XML data. This is due to improper allocation of system resources.
Recommendations IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) versions 11.5.0 through 11.5.9 should be updated. IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) versions 12.1.0 through 12.1.3 should be updated.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-770: Allocation of Resources Without Limits or Throttling
Related identifiers
CVE-2025-36123
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com