CVE-2025-2668

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 - 11.5.9 is vulnerable to a denial of service as the server may crash when an authenticated user creates a specially crafted query.
References
Link Resource
https://www.ibm.com/support/pages/node/7257518 Patch Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ibm:db2:*:*:*:*:*:linux:*:*
cpe:2.3:a:ibm:db2:*:*:*:*:*:unix:*:*
cpe:2.3:a:ibm:db2:*:*:*:*:*:windows:*:*

History

05 Feb 2026, 20:03

Type Values Removed Values Added
CPE cpe:2.3:a:ibm:db2:*:*:*:*:*:unix:*:*
cpe:2.3:a:ibm:db2:*:*:*:*:*:windows:*:*
cpe:2.3:a:ibm:db2:*:*:*:*:*:linux:*:*
First Time Ibm db2
Ibm
CWE CWE-770
References () https://www.ibm.com/support/pages/node/7257518 - () https://www.ibm.com/support/pages/node/7257518 - Patch, Vendor Advisory

30 Jan 2026, 22:15

Type Values Removed Values Added
New CVE

Information

Published : 2026-01-30 22:15

Updated : 2026-02-05 20:03


NVD link : CVE-2025-2668

Mitre link : CVE-2025-2668

CVE.ORG link : CVE-2025-2668


JSON object : View

Products Affected

ibm

  • db2
CWE
CWE-789

Memory Allocation with Excessive Size Value

CWE-770

Allocation of Resources Without Limits or Throttling