Severity
Medium
Analysis Summary
CVE-2025-1493 CVSS:5.3
IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow an authenticated user to cause a denial of service due to concurrent execution of shared resources.
CVE-2025-0915 CVSS:5.3
IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) under specific configurations could allow an authenticated user to cause a denial of service due to insufficient release of allocated memory resources.
CVE-2025-1000 CVSS:5.3
IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow an authenticated user to cause a denial of service when connecting to a z/OS database due to improper handling of automatic client rerouting.
CVE-2025-1992 CVSS:5.3
IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow an authenticated user, under non default configurations, to cause a denial of service due to insufficient release of allocated memory after usage.
Impact
- Denial of Service
Indicators of Compromise
CVE
CVE-2025-1493
CVE-2025-0915
CVE-2025-1000
CVE-2025-1992
Affected Vendors
- IBM
Affected Products
- IBM Db2 for Linux UNIX and Windows - 12.1.0
Remediation
Refer to IBM Security Advisory for patch, upgrade, or suggested workaround information.