How severe is CVE-2025-2534?

CVE-2025-2534 has a CVSS v3 score of 5.3 (MEDIUM).

CVE-2025-2534

Name: db2
Author: ibm

5.3MEDIUM

IBM Db2 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes Db2 Connect Server) is vulnerable to a denial of service as the server may crash

Published: 11/7/2025Updated: 11/19/2025

Description

IBM Db2 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes Db2 Connect Server) is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query.

AI AnalysisPowered by AI

Affected Products

ibmdb2

References

https://www.ibm.com/support/pages/node/7250472
Vendor Advisory