IBM Db2 denial of service

Vulnerability

IBM Db2 for Linux, UNIX and Windows (including Db2 Connect Server) versions 10.5, 11.1, and 11.5 are vulnerable to denial of service when a specially crafted query is executed on certain tables. The vulnerability requires low privileges, high attack complexity, and no user interaction [1].

Exploitation

An authenticated attacker with network access can exploit this vulnerability by sending a specially crafted query to the vulnerable tables. The attack complexity is high, meaning the attacker may need to gather additional information or perform specific conditions for a successful attack. No user interaction is required [1].

Impact

Successful exploitation results in a denial of service condition, causing high availability impact. There is no impact on confidentiality or integrity, and the scope remains unchanged [1].

Mitigation

As of the publication date, IBM has not released a fix for this vulnerability. No workarounds are mentioned in the available reference. Users should monitor for updates from IBM [1].