IBM Db2 for Linux Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in IBM Db2 for Linux versions 12.1.0, 12.1.1, and 12.1.2. This vulnerability could allow an unauthenticated user to cause a denial of service by creating a deadlock situation, where executable segments are waiting for each other to release a necessary lock.

Impact

Exploitation of this vulnerability can lead to a deadlock condition, causing a denial-of-service situation where the database becomes unresponsive or unavailable.

Remediation

Users can download a special build containing the interim fix for this issue from Fix Central. These special builds are available for Db2 versions 12.1.1 and 12.1.2. Instructions for downloading the latest special builds for Db2 version 12.1.2 are also available on the IBM Support page.