{"id":"CVE-2026-113698","kind":"vulnerability","aliases":["CVE-2026-113698"],"related":[],"title":"IBM Db2: a crafted query on Materialized Query Tables crashes the database","description":"IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a denial of service when executing a specially crafted query with a Materialized Query Table.","summary":"IBM Db2 versions 11.5.0 through 11.5.9 and 12.1.0 through 12.1.5 can be denied service by a specially crafted query that uses a Materialized Query Table. An attacker who can run that query can make the database unavailable.","severity":"medium","cvss":6.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["databases","db2","ibm-db2","vendor"],"not_affected_if":["no-materialized-query-tables","other-db2-versions"],"how_to_check":"- Check the installed Db2 version with `db2level` and compare it against the affected ranges 11.5.0 through 11.5.9 and 12.1.0 through 12.1.5.\n- Check whether the database uses Materialized Query Tables (MQTs), for example by querying the catalog view SYSCAT.TABLES for TYPE 'S' (summary tables).","fix":"- IBM Db2 11.5.0 through 11.5.9 and 12.1.0 through 12.1.5 are affected; the sources do not state a fixed version.","status":"open","published_at":"2026-11-08T17:16:36+00:00","first_seen_at":"2026-11-08T17:22:01+00:00","triaged_at":"2026-11-08T17:24:17+00:00","updated_at":"2026-11-08T17:24:17+00:00","category":"vendor","confidence":0.5,"triage":{"at":"2026-11-08T17:24:17Z","model":"claude-haiku-5-5","output":{"fix":"- IBM Db2 11.5.0 through 11.5.9 and 12.1.0 through 12.1.5 are affected; the sources do not state a fixed version.","reach":"unknown","title":"IBM Db2: a crafted query on Materialized Query Tables crashes the database","impact":"low","summary":"IBM Db2 versions 11.5.0 through 11.5.9 and 12.1.0 through 12.1.5 can be denied service by a specially crafted query that uses a Materialized Query Table. An attacker who can run that query can make the database unavailable.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["db2","ibm-db2","databases"],"confidence":0.5,"fix_status":"unknown","needs_auth":"unknown","worst_case":"Database server crashes or stops responding to queries","analyst_note":"Find IBM's security bulletin for CVE-2026-113698 to confirm the fixed Db2 versions and whether authentication is needed to submit the query.","how_to_check":"- Check the installed Db2 version with `db2level` and compare it against the affected ranges 11.5.0 through 11.5.9 and 12.1.0 through 12.1.5.\n- Check whether the database uses Materialized Query Tables (MQTs), for example by querying the catalog view SYSCAT.TABLES for TYPE 'S' (summary tables).","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["other-db2-versions","no-materialized-query-tables"],"who_is_affected":"Only Db2 servers in the affected version ranges are exposed, and only where users or applications can submit queries that touch Materialized Query Tables. Teams on other Db2 versions, or with no MQTs and no untrusted query access, can skip it. The sources do not say which query shape triggers the crash.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000795,"input_tokens":4540,"output_tokens":682,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-113698':15A,18A '-2026':14A,17A '11.5.0':28B,64C '11.5.9':30B,66C '12.1.0':32B,68C '12.1.5':34B,70C 'attack':51B 'craft':4A,42B,82C 'crash':10A 'cve':13A,16A 'databas':12A,19B,60B 'db2':2A,20B,23B,26B,63C 'deni':37B 'denial':75C 'execut':79C 'ibm':1A,22B,25B,62C 'ibm-db2':21B 'make':58B 'materi':7A,47B,86C 'queri':5A,8A,43B,48B,56B,83C,87C 'run':54B 'servic':38B,77C 'special':41B,81C 'tabl':9A,49B,88C 'unavail':61B 'use':45B 'vendor':24B 'version':27B 'vulner':72C","nicknames":[],"mitigations":[],"who_affected":"Only Db2 servers in the affected version ranges are exposed, and only where users or applications can submit queries that touch Materialized Query Tables. Teams on other Db2 versions, or with no MQTs and no untrusted query access, can skip it. The sources do not say which query shape triggers the crash.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["databases","db2","ibmdb2","medium","vendor"],"campaign_type":null,"search_a":"'-113698':15A,18A '-2026':14A,17A 'craft':4A 'crash':10A 'cve':13A,16A 'databas':12A 'db2':2A 'ibm':1A 'materi':7A 'queri':5A,8A 'tabl':9A","search_b":"'11.5.0':28B '11.5.9':30B '12.1.0':32B '12.1.5':34B 'attack':51B 'craft':42B 'databas':19B,60B 'db2':20B,23B,26B 'deni':37B 'ibm':22B,25B 'ibm-db2':21B 'make':58B 'materi':47B 'queri':43B,48B,56B 'run':54B 'servic':38B 'special':41B 'tabl':49B 'unavail':61B 'use':45B 'vendor':24B 'version':27B","search_c":"'11.5.0':64C '11.5.9':66C '12.1.0':68C '12.1.5':70C 'craft':82C 'db2':63C 'denial':75C 'execut':79C 'ibm':62C 'materi':86C 'queri':83C,87C 'servic':77C 'special':81C 'tabl':88C 'vulner':72C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-08T17:16:36+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss_by":"psirt@us.ibm.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-113698","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-113698","severity":null,"published_at":"2026-11-08T17:16:36+00:00","modified_at":"2026-11-08T17:16:36+00:00","first_seen_at":"2026-11-08T17:22:01+00:00","fetched_at":"2026-11-08T17:22:01+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}