CVE-2024-52903

IBM Db2 for Linux, UNIX and Windows 12.1.0 and 12.1.1 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query.

CVSS v3 5.3 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.6 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.ibm.com/support/pages/node/7232336

Configurations

No configuration.

History

01 May 2025, 23:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-05-01 23:15

Updated : 2025-05-02 13:52

NVD link : CVE-2024-52903

Mitre link : CVE-2024-52903

CVE.ORG link : CVE-2024-52903

JSON object : View

Products Affected

No product.

CWE

CWE-20

Improper Input Validation

Show plain JSON

{"id": "CVE-2024-52903", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "psirt@us.ibm.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.6}]}, "published": "2025-05-01T23:15:50.317", "references": [{"url": "https://www.ibm.com/support/pages/node/7232336", "source": "psirt@us.ibm.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Primary", "source": "psirt@us.ibm.com", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "IBM Db2 for Linux, UNIX and Windows 12.1.0 and 12.1.1 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query."}], "lastModified": "2025-05-02T13:52:51.693", "sourceIdentifier": "psirt@us.ibm.com"}

{

id : CVE-2024-52903 (string)

cveTags : [ *empty* ]

metrics : { »

cvssMetricV31 : [ »

0 : { »

type : Primary (string)

source : psirt@us.ibm.com (string)

cvssData : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 5.3 (number)

attackVector : NETWORK (string)

baseSeverity : MEDIUM (string)

vectorString : CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H (string)

integrityImpact : NONE (string)

userInteraction : NONE (string)

attackComplexity : HIGH (string)

availabilityImpact : HIGH (string)

privilegesRequired : LOW (string)

confidentialityImpact : NONE (string)

}

impactScore : 3.6 (number)

exploitabilityScore : 1.6 (number)

}

]

}

published : 2025-05-01T23:15:50.317 (string)

references : [ »

0 : { »

url : https://www.ibm.com/support/pages/node/7232336 (string)

source : psirt@us.ibm.com (string)

}

]

vulnStatus : Awaiting Analysis (string)

weaknesses : [ »

0 : { »

type : Primary (string)

source : psirt@us.ibm.com (string)

description : [ »

0 : { »

lang : en (string)

value : CWE-20 (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : IBM Db2 for Linux, UNIX and Windows 12.1.0 and 12.1.1 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query. (string)

}

]

lastModified : 2025-05-02T13:52:51.693 (string)

sourceIdentifier : psirt@us.ibm.com (string)

}

CVE-2024-52903

5.3 /10

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

JSON object

Attach tags to CVE-2024-52903

5.3^/10

Attach tags to `CVE-2024-52903`