Denial of Service Vulnerability in IBM Db2 for Linux
CVE-2025-33114

5.3MEDIUM

Key Information:

Vendor

IBM
Status
Db2
Vendor
CVE Published:
29 July 2025

What is CVE-2025-33114?

IBM Db2 for Linux versions 12.1.0, 12.1.1, and 12.1.2 has a vulnerability that allows for a denial of service attack. This occurs when an attacker sends a specially crafted query, under specific non-default conditions, leading to service unavailability. Users are advised to review security patches provided by IBM to mitigate the risk associated with this vulnerability.

Affected Version(s)

Db2 Linux 12.1.0

Db2 Linux 12.1.1

Db2 Linux 12.1.2

References

https://www.ibm.com/support/pages/node/7240943
vendor-advisorypatch

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-33114 : Denial of Service Vulnerability in IBM Db2 for Linux