Skip to content
OpenAdvisories
High WID-SEC-2026-0210 2 CVEs

IBM DB2 Big SQL: Mehrere Schwachstellen

Published Jan 25, 2026 · Updated May 11, 2026 · Revision 3 · de-DE

Vendor: Dell Vendor: IBM Product: Db2 Product: ECS Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in IBM DB2 Big SQL ausnutzen, um einen Denial of Service Angriff durchzuführen, und um beliebigen Programmcode auszuführen.

Product

IBM DB2 ist ein relationales Datenbanksystem (RDBS) von IBM.

Vulnerabilities 2

  • High 7.1
    CVE-2025-46762

    Apache Parquet Java: Potential malicious code execution from trusted packages in the parquet-avro module when reading an Avro schema from a Parquet file metadata

    Schema parsing in the parquet-avro module of Apache Parquet 1.15.0 and previous versions allows bad actors to execute arbitrary code. While 1.15.1 introduced a fix to restrict untrusted packages, the default setting of trusted packages still allows malicious …

    Apache Software Foundation Apache Parquet Java trino trino-plugin-opensearch Wolfi Maven
  • Medium 5.3
    CVE-2024-39724

    IBM Db2 Big SQL on Cloud Pak for Data is vulnerable to a denial of service due to lack of throttling on an API

    IBM Db2 Big SQL on Cloud Pak for Data versions 7.6 (on CP4D 4.8), 7.7 (on CP4D 5.0), and 7.8 (on CP4D 5.1) do not properly limit the allocation of system resources. An authenticated user with internal knowledge of the environment could exploit this weakness t…

    IBM Db2 Big SQL on Cloud Pak for Data

Revision history

  1. #3

    Neue Updates von Dell aufgenommen

  2. #2

    Referenz(en) aufgenommen: EUVD-2024-55395

  3. #1

    Initiale Fassung

References