PT-2026-5865 · Ibm · Ibm Db2 Big Sql+1

Publicado 2026-02-04 · Atualizado 2026-02-04 · CVE-2024-39724

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions IBM Db2 Big SQL on Cloud Pak for Data versions 7.6 (on CP4D 4.8) through 7.8 (on CP4D 5.1)

Description IBM Db2 Big SQL on Cloud Pak for Data does not properly limit the allocation of system resources. An authenticated user with internal knowledge of the environment could exploit this weakness to cause a denial of service.

Recommendations Update IBM Db2 Big SQL on Cloud Pak for Data to a version beyond 7.8 (on CP4D 5.1). Update IBM Db2 Big SQL on Cloud Pak for Data to a version beyond 7.7 (on CP4D 5.0). Update IBM Db2 Big SQL on Cloud Pak for Data to a version beyond 7.6 (on CP4D 4.8).

Correção

DoS

Allocation of Resources Without Limits

Enumeração de Fraquezas

CWE-770

Identificadores relacionados

CVE-2024-39724

Produtos afetados

Cloud Pak For Data

Ibm Db2 Big Sql

Referências · 4

• https://ibm.com/support/pages/node/7257907 · Correção, Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2024-39724 · Nota de Segurança
• https://t.me/cveNotify/150918 · Publicação no Telegram
• https://twitter.com/CVEnew/status/2019182762113265858 · Publicação no Twitter