CVE-2024-51473 — Stack-based Buffer Overflow in IBM DB2

CWE-121 — Stack-based Buffer Overflow3 documents3 sources
Severity
7.5HIGHNVD
CNA6.5
EPSS
0.1%
top 75.08%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM DB2
Timeline
PublishedJul 29

Description

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5.0.0 through 10.5.0.11, 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.2 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5ibm/db210.5.0.0 — 10.5.0.11+3
▶NVDibm/db210.5.0.0 — 10.5.0.11+3

🔴Vulnerability Details

2
GHSA
GHSA-5fw2-53qc-rxfv: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10↗2025-07-29
▶
CVEList
IBM Db2 for Linux, UNIX and Windows denial of service↗2025-07-29
▶
CVE-2024-51473 — Stack-based Buffer Overflow in IBM DB2 | cvebase