CVE-2024-39724 — IBM Db2 Big SQL on Cloud Pak for Data is vulnerable to a denial of service due to lack of throttling on an API

CVE-2024-39724

IBM Db2 Big SQL on Cloud Pak for Data is vulnerable to a denial of service due to lack of throttling on an API PUBLISHED

Description (CNA)

IBM Db2 Big SQL on Cloud Pak for Data versions 7.6 (on CP4D 4.8), 7.7 (on CP4D 5.0), and 7.8 (on CP4D 5.1) do not properly limit the allocation of system resources. An authenticated user with internal knowledge of the environment could exploit this weakness to cause a denial of service.

Affected (CNA)

Vendor / product	Versions
IBM / Db2 Big SQL on Cloud Pak for Data	affected IBM Db2 Big SQL 7.6 on Cloud Pak for Data 4.8 through 2.1.0; affected IBM Db2 Big SQL 7.7 on Cloud Pak for Data 5.0; affected IBM Db2 Big SQL 7.8 on Cloud Pak for Data 5.1

CWE

CWE-770

References

https://www.ibm.com/support/pages/node/7257907

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.