IBM Db2 Denial-of-Service Vulnerability in Range Partitioned Tables

A denial-of-service vulnerability has been identified in IBM Db2 versions 11.5.0 through 11.5.9 and 12.1.0 through 12.1.4. The issue arises when a specially crafted query is executed on range partitioned tables, leading to a service disruption.

Impact

Exploitation of this vulnerability causes a denial-of-service condition, where the database service becomes unavailable or unresponsive.

Remediation

Users can download a special build containing the interim fix for this vulnerability from Fix Central. For Db2 version 11.5, the special build #81937 or later is available for version 11.5.9. For Db2 version 12.1, the special build #83501 or later can be obtained for version 12.1.4.