Analysis Summary

CVE-2025-1493 CVSS:5.3

IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow an authenticated user to cause a denial of service due to concurrent execution of shared resources.

CVE-2025-0915 CVSS:5.3

IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) under specific configurations could allow an authenticated user to cause a denial of service due to insufficient release of allocated memory resources.

CVE-2025-1000 CVSS:5.3

IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow an authenticated user to cause a denial of service when connecting to a z/OS database due to improper handling of automatic client rerouting.

CVE-2025-1992 CVSS:5.3

IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow an authenticated user, under non default configurations, to cause a denial of service due to insufficient release of allocated memory after usage.

Impact

• Denial of Service

Indicators of Compromise

CVE

• CVE-2025-1493

• CVE-2025-0915

• CVE-2025-1000

• CVE-2025-1992

Affected Vendors

Remediation

Refer to IBM Security Advisory for patch, upgrade, or suggested workaround information.

CVE-2025-1493

CVE-2025-0915

CVE-2025-1000

CVE-2025-1992