CVE-2025-1992
IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 could allow an authenticated user in federation environment, to cause a denial of service due to insufficient release of allocated memory after usage.
- Score
- CVSS 3.1 6.5 Medium
- Status
- Modified - psirt@us.ibm.com
- Published
- 2025-05-05
- Last modified
- 2025-11-03
- Weaknesses
- CWE-401
Affected products
References
- https://www.ibm.com/support/pages/node/7232515
- https://security.netapp.com/advisory/ntap-20250516-0002/
