IBM Db2 Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in IBM Db2 for Linux, UNIX, and Windows, specifically in versions 12.1.0 through 12.1.3, including Db2 Connect Server. This vulnerability could allow a local user to cause the server to crash by exploiting improper handling of special elements in data query logic.

Impact

Exploitation of this vulnerability can lead to a server crash, causing a denial-of-service condition.

Remediation

Users can download a special build containing the interim fix for this issue from Fix Central. These special builds are available for Db2 version 12.1.2 and 12.1.3. Instructions for downloading these builds are available on the IBM Support page.