CVE-2024-51473

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5.0.0 through 10.5.0.11, 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.2

is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-121

Affected software

VendorProductVersions
IBMDb2>= 10.5.0.0, <= 10.5.0.11; >= 11.1.0, <= 11.1.4.7; >= 11.5.0, <= 11.5.9; >= 12.1.0, <= 12.1.2

References

Timeline

Published
Jul 29, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-514756.1IBM Content Navigator 3.0.11, 3.0.15, and 3.1.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which wCVE-2024-514767.5IBM Concert Software 1.0.5 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials.CVE-2024-514776.5IBM InfoSphere Information Server 11.7 could allow an authenticated to obtain sensitive username information due to an observable responseCVE-2024-514789.1YesWiki is a wiki system written in PHP. Prior to 4.4.5, the use of a weak cryptographic algorithm and a hard-coded salt to hash the passworCVE-2024-514797.5Next.js is a React framework for building full-stack web applications. In affected versions if a Next.js application is performing authorizaCVE-2024-51487.5A flaw was found in the gnome-remote-desktop package. The gnome-remote-desktop system daemon performs inadequate validation of session agentCVE-2024-514807.0RedisTimeSeries is a time-series database (TSDB) module for Redis, by Redis. Executing one of these commands TS.QUERYINDEX, TS.MGET, TS.MRAGCVE-2024-514811.0Nix is a package manager for Linux and other Unix systems. On macOS, built-in builders (such as `builtin:fetchurl`, exposed to users with `iCVE-2024-514829.9ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder v1.37.* <= 1.37.64 is vulnerable to boolean-basCVE-2024-514836.9changedetection.io is free, open source web page change detection software. Prior to version 0.47.5, when a WebDriver is used to fetch filesCVE-2024-514848.1Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing fails to properly valCVE-2024-514858.1Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing fails to properly val
CVE-2024-51473: High severity, CVSS 7.5 | Vulnix