CVE-2024-49350
29.05.2025, 20:15
IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query.Enginsight
| Vendor | Product | Version |
|---|---|---|
| ibm | db2 | 11.1 ≤ 𝑥 ≤ 11.1.4.7 |
| ibm | db2 | 11.1 ≤ 𝑥 ≤ 11.1.4.7 |
| ibm | db2 | 11.1 ≤ 𝑥 ≤ 11.1.4.7 |
| ibm | db2 | 11.5 ≤ 𝑥 ≤ 11.5.9 |
| ibm | db2 | 11.5 ≤ 𝑥 ≤ 11.5.9 |
| ibm | db2 | 11.5 ≤ 𝑥 ≤ 11.5.9 |
| ibm | db2 | 12.1.0 ≤ 𝑥 ≤ 12.1.1 |
| ibm | db2 | 12.1.0 ≤ 𝑥 ≤ 12.1.1 |
| ibm | db2 | 12.1.0 ≤ 𝑥 ≤ 12.1.1 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-121 - Stack-based Buffer OverflowA stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
- CWE-787 - Out-of-bounds WriteThe software writes data past the end, or before the beginning, of the intended buffer.
Vulnerability Media Exposure