CVE-2025-1992 | THREATINT

Description

IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 could allow an authenticated user, under non default configurations, to cause a denial of service due to insufficient release of allocated memory after usage.

Reserved 2025-03-05 | Published 2025-05-05 | Updated 2025-05-05 | Assigner ibm

MEDIUM: 5.3CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Problem types

CWE-401 Missing Release of Memory after Effective Lifetime

Product status

Default status

unaffected

11.5.0

affected

12.1.0

affected

References

www.ibm.com/support/pages/node/7232515 vendor-advisory

cve.org (CVE-2025-1992)

nvd.nist.gov (CVE-2025-1992)

Download JSON