Security Bulletin: IBM® Db2® is vulnerable to a denial of service due to insufficient release of allocated memory after usage. (CVE-2025-1992)

Summary IBM® Db2® is vulnerable to a denial of service due to insufficient release of allocated memory after usage under federation configuration. Vulnerability Details CVEID:CVE-2025-1992 DESCRIPTION: IBM Db2 for Linux, UNIX and Windows includes DB2 Connect Server could allow an authenticated us...

CVE-2025-1992

CVE-2025-1992 concerns IBM Db2 for Linux, UNIX and Windows (including DB2 Connect Server) in federation deployments. The issue is a denial-of-service caused by insufficient release of memory after usage, affecting Db2 versions 11.5.0–11.5.9 and 12.1.0–12.1.1 when authenticated users operate in fe...