CVE-2021-29777
IBM Db2 vulnerability analysis and mitigation

Overview

CVE-2021-29777 is a vulnerability affecting IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server). The vulnerability was discovered and disclosed in June 2021, affecting multiple versions including Db2 V9.7, V10.1, V10.5, V11.1, and V11.5 editions on all platforms (IBM Security).

Technical details

Under specific circumstances, when a table is dropped while being accessed in another session, the vulnerability could allow an authenticated user to cause a denial of service. The vulnerability has a CVSS Base score of 5.3 with a vector of CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H, indicating medium severity (IBM Security).

Impact

Successful exploitation of this vulnerability could lead to a denial of service condition in the affected Db2 database system. The impact is primarily focused on system availability, with no direct impact on confidentiality or integrity (IBM Security).

Mitigation and workarounds

IBM has released special builds containing interim fixes for all affected versions. These special builds are available based on the most recent fixpack level for each impacted release: V9.7 FP11, V10.1 FP6, V10.5 FP11, V11.1.4 FP6, and V11.5.5 FP1. The fixes can be applied to any affected fixpack level of the appropriate release to remediate this vulnerability (IBM Security).

Additional resources


SourceThis report was generated using AI

Related IBM Db2 vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2025-36186HIGH7.8
  • IBM Db2IBM Db2
  • cpe:2.3:a:ibm:db2
NoNoNov 07, 2025
CVE-2025-36008MEDIUM6.5
  • IBM Db2IBM Db2
  • cpe:2.3:a:ibm:db2
NoYesNov 07, 2025
CVE-2025-36185MEDIUM5.5
  • IBM Db2IBM Db2
  • cpe:2.3:a:ibm:db2
NoNoNov 07, 2025
CVE-2025-36136MEDIUM5.5
  • IBM Db2IBM Db2
  • cpe:2.3:a:ibm:db2
NoYesNov 07, 2025
CVE-2025-36131MEDIUM4.6
  • IBM Db2IBM Db2
  • cpe:2.3:a:ibm:db2
NoYesNov 07, 2025

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management