Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 - 11.5.9 and 12.1.0 - 12.1.3 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query with XML columns.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2025-36442 IBM Db2 Denial of Service via Specially Crafted XML Query Vulnerability https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-36442
Post summary
The text supplies a brief disclosure of a denial‑of‑service vulnerability in IBM Db2 via crafted XML queries, without providing PoC, exploit, patch, or active exploitation details.
CVE-2025-36442 IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) is vulnerable to a denial of service as the server may crash under certain conditions with a special… https://www.cve.org/CVERecord?id=CVE-2025-36442
Post summary
IBM Db2 for Linux, UNIX and Windows is reported to allow a denial‑of‑service condition that could crash the server under special circumstances, but the post provides no PoC, exploit, patch, or detailed technical information.
3 of 3 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | ibm | db2 | - | linux | - |
| App | ibm | db2 | - | unix | - |
| App | ibm | db2 | - | windows | - |