IBM Db2 Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in IBM Db2 versions 12.1.0 through 12.1.2 for Linux, UNIX, and Windows, including Db2 Connect Server. This vulnerability could allow a local user to disrupt service by improperly neutralizing special elements in data query logic.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition, causing the application to become unresponsive or unavailable.

Remediation

Users can download a special build containing the interim fix for this vulnerability from Fix Central. This special build is available for Db2 version 12.1.2 and can be applied to any affected level of the 12.1 release.