CVE-2024-52894 — Stack-based Buffer Overflow in IBM DB2

CWE-121 — Stack-based Buffer Overflow3 documents3 sources
Severity
4.9MEDIUMNVD
EPSS
0.1%
top 76.34%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM DB2
Timeline
PublishedJul 29

Description

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5.0.0 through 10.5.0.11, 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.2 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:HExploitability: 1.2 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5ibm/db210.5.0.0 — 10.5.0.11+3
▶NVDibm/db210.5.0.0 — 10.5.0.11+3

🔴Vulnerability Details

2
CVEList
IBM Db2 for Linux, UNIX and Windows denial of service↗2025-07-29
▶
GHSA
GHSA-j7gx-hph4-28cg: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10↗2025-07-29
▶
CVE-2024-52894 — Stack-based Buffer Overflow in IBM DB2 | cvebase