Vulnerability Description
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5.0.0 through 10.5.0.11, 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.2 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Db2 | >= 10.5.0.0, <= 10.5.0.11 |
Related Weaknesses (CWE)
References
- https://www.ibm.com/support/pages/node/7240953Vendor Advisory
FAQ
What is CVE-2024-52894?
CVE-2024-52894 is a vulnerability with a CVSS score of 4.9 (MEDIUM). IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5.0.0 through 10.5.0.11, 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.2 is vulnerable to a denial of ser...
How severe is CVE-2024-52894?
CVE-2024-52894 has been rated MEDIUM with a CVSS base score of 4.9/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-52894?
Check the references section above for vendor advisories and patch information. Affected products include: Ibm Db2.