CVE-2025-36353: 
IBM Db2 vulnerability analysis and mitigation

CVE-2025-36353 is a denial-of-service vulnerability in IBM Db2 for Linux, UNIX, and Windows (including Db2 Connect Server) caused by improper neutralization of special elements in data query logic. It affects versions 11.5.0 through 11.5.9 and 12.1.0 through 12.1.3 across Linux, UNIX, and Windows platforms. The vulnerability was published on January 30, 2026, with a patch available via IBM's support portal. It carries a CVSS v3.1 base score of 5.5 (Medium) (IBM Support, Red Hat CVE).

The root cause is classified as CWE-943 (Improper Neutralization of Special Elements in Data Query Logic), where specially crafted input containing special elements is not properly sanitized before being processed in Db2's query logic. A local user with low privileges can submit malformed query input that triggers an unhandled condition, causing the Db2 service to crash or become unresponsive. No authentication bypass or remote access is required — the attacker must have local access to the affected system. No public technical write-ups or proof-of-concept code have been identified at this time (IBM Support).

Successful exploitation results in a high availability impact, allowing a local attacker to completely disrupt IBM Db2 database services, rendering the database unavailable to legitimate users and applications. There is no confidentiality or integrity impact — the vulnerability is limited to denial of service. Environments relying on Db2 for critical business operations could experience significant downtime if exploited (IBM Support, Red Hat CVE).

IBM has released patches for all affected versions; administrators should apply the fixes detailed in IBM's support documentation at the linked advisory. Affected version ranges are 11.5.0–11.5.9 and 12.1.0–12.1.3 on Linux, UNIX, and Windows. As a compensating control, organizations should restrict local user access to Db2 systems and monitor for unusual query patterns or repeated service disruptions that may indicate exploitation attempts (IBM Support).