CVE-2024-49828

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5.0.0 through 10.5.0.11, 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.2 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-121

Affected software

No affected versions have been published.

Timeline

Published: Jul 29, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-498297.8Memory corruption can occur during context user dumps due to inadequate checks on buffer length.CVE-2024-49835.4The The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce plugin for WordPress is vulnerable to CVE-2024-498307.8Memory corruption while processing an IOCTL call to set mixer controls.CVE-2024-498327.8Memory corruption in Camera due to unusually high number of nodes passed to AXI port.CVE-2024-498337.8Memory corruption can occur in the camera when an invalid CID is used.CVE-2024-498347.8Memory corruption while power-up or power-down sequence of the camera sensor.CVE-2024-498357.8Memory corruption while reading secure file.CVE-2024-498367.8Memory corruption may occur during the synchronization of the camera`s frame processing pipeline.CVE-2024-498377.8Memory corruption while reading CPU state data during guest VM suspend.CVE-2024-498387.5Information disclosure while parsing the OCI IE with invalid length.CVE-2024-498399.8Memory corruption during management frame processing due to mismatch in T2LM info element.CVE-2024-49846.4The Yoast SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘display_name’ author meta in all versions up to, an