CVE-2025-36136

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a local user to cause a denial of service due to the database monitor script incorrectly detecting that the instance is still starting under specific conditions.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.1 MEDIUM
LOCAL
HIGH
NONE
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
ibmCNA
5.1 MEDIUM
LOCAL
HIGH
NONE
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 3%
VendorProductVersion
ibmdb2
11.5.0 ≤
𝑥
≤ 11.5.9
ibmdb2
11.5.0 ≤
𝑥
≤ 11.5.9
ibmdb2
11.5.0 ≤
𝑥
≤ 11.5.9
ibmdb2
12.1.0 ≤
𝑥
≤ 12.1.3
ibmdb2
12.1.0 ≤
𝑥
≤ 12.1.3
ibmdb2
12.1.0 ≤
𝑥
≤ 12.1.3
𝑥
= Vulnerable software versions
Common Weakness Enumeration
Vulnerability Media Exposure
References
https://www.ibm.com/support/pages/node/7250485