CVE-2024-35136

5.3 MEDIUM
Published: August 14, 2024 Modified: November 04, 2025
View on NVD

Description

IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) federated server 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query under certain non default conditions. IBM X-Force ID: 291307.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

CVSS v3.x Details

0.0 Low Medium High Critical 10.0
Vector String
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/291307
Source: psirt@us.ibm.com
Vendor Advisory
https://www.ibm.com/support/pages/node/7165341
Source: psirt@us.ibm.com
Vendor Advisory
https://security.netapp.com/advisory/ntap-20240912-0003/
Source: af854a3a-2127-422b-91ae-364da2661108

3 reference(s) from NVD

Quick Stats

CVSS v3 Score
5.3 / 10.0
EPSS (Exploit Probability)
0.2%
39th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

Affected Vendors

ibm