IBM Db2 for Linux, UNIX and Windows Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in IBM Db2 for Linux, UNIX, and Windows, specifically in versions 12.1.0 and 12.1.1. Under certain conditions, the server may crash when processing a specially crafted query. This vulnerability arises from improper input validation, allowing malicious queries to disrupt server operations.

Impact

Exploitation of this vulnerability can lead to a server crash, causing a denial-of-service condition where the database becomes unavailable.

Remediation

Users can download a special build containing the interim fix for this vulnerability from IBM Fix Central. Special Build #50594 or later for Db2 version 12.1.0 is available, as well as Special Build #54779 or later for version 12.1.1.