Description
IBM Db2 Big SQL on Cloud Pak for Data versions 7.6 (on CP4D 4.8), 7.7 (on CP4D 5.0), and 7.8 (on CP4D 5.1) do not properly limit the allocation of system resources. An authenticated user with internal knowledge of the environment could exploit this weakness to cause a denial of service.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | Db2 Big SQL on Cloud Pak for Data | IBM Db2 Big SQL 7.6 on Cloud Pak for Data 4.8 – ≤ 2.1.0, IBM Db2 Big SQL 7.7 on Cloud Pak for Data 5.0, IBM Db2 Big SQL 7.8 on Cloud Pak for Data 5.1 | — |
Advisories 1
- WID-SEC-2026-0210 IBM DB2 Big SQL: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 11, 2026
References
- https://www.ibm.com/support/pages/node/7257907 vendor-advisory patch