IBM DB2/DB2 Connect Server up to 10.5.0.11/11.1.4.7/11.5.9/12.1.2 Query stack-based overflow

Summaryinfo

A vulnerability, which was classified as critical, was found in IBM DB2 and DB2 Connect Server up to 10.5.0.11/11.1.4.7/11.5.9/12.1.2. This vulnerability affects unknown code of the component Query Handler. Such manipulation leads to stack-based overflow. This vulnerability is listed as CVE-2024-52894. The attack may be performed from remote. There is no available exploit. You should upgrade the affected component.

Detailsinfo

A vulnerability was found in IBM DB2 and DB2 Connect Server up to 10.5.0.11/11.1.4.7/11.5.9/12.1.2. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Query Handler. The manipulation with an unknown input leads to a stack-based overflow vulnerability. Using CWE to declare the problem leads to CWE-121. A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function). Impacted is availability. CVE summarizes:

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5.0.0 through 10.5.0.11, 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.2 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query.

The advisory is shared for download at ibm.com. This vulnerability is handled as CVE-2024-52894 since 11/17/2024. The exploitation is known to be easy. The attack may be launched remotely. Additional levels of successful authentication are necessary for exploitation. There are neither technical details nor an exploit publicly available. The current price for an exploit might be approx. USD $0-$5k (estimation calculated on 01/23/2026).

The vulnerability scanner Nessus provides a plugin with the ID 243291 (IBM DB2 Multiple DoS Vulnerabilities (7240944, 7240945, 7240953) (Windows)), which helps to determine the existence of the flaw in a target environment.

Upgrading eliminates this vulnerability.

The vulnerability is also documented in the databases at Tenable (243291) and CERT Bund (WID-SEC-2025-1675). Once again VulDB remains the best source for vulnerability data.

Affected

• IBM Tivoli Business Service Manager
• HCL Commerce
• IBM Security Guardium
• IBM DB2

Productinfo

Type

• Database Software

Vendor

• IBM

Name

• DB2
• DB2 Connect Server

Version

• 10.5.0.0
• 10.5.0.1
• 10.5.0.2
• 10.5.0.3
• 10.5.0.4
• 10.5.0.5
• 10.5.0.6
• 10.5.0.7
• 10.5.0.8
• 10.5.0.9
• 10.5.0.10
• 10.5.0.11
• 11.1.4.0
• 11.1.4.1
• 11.1.4.2
• 11.1.4.3
• 11.1.4.4
• 11.1.4.5
• 11.1.4.6
• 11.1.4.7
• 11.5.0
• 11.5.1
• 11.5.2
• 11.5.3
• 11.5.4
• 11.5.5
• 11.5.6
• 11.5.7
• 11.5.8
• 11.5.9
• 12.1.0
• 12.1.1
• 12.1.2

License

• commercial

Website

• Vendor: https://www.ibm.com/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion