CVE-2024-39724

IBM Db2 Big SQL on Cloud Pak for Data is vulnerable to a denial of service due to lack of throttling on an API

State: Published
Severity: 5.3 Medium
Published: Feb 4, 2026
Updated: Feb 4, 2026
Reserved: Jun 28, 2024

Description

IBM Db2 Big SQL on Cloud Pak for Data versions 7.6 (on CP4D 4.8), 7.7 (on CP4D 5.0), and 7.8 (on CP4D 5.1) do not properly limit the allocation of system resources. An authenticated user with internal knowledge of the environment could exploit this weakness to cause a denial of service.

Scores

CVSS	Score	Vector	Source
3.1	5.3 Medium	CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H	ibm

Weaknesses

CWE-770 Allocation of Resources Without Limits or Throttling

Affected Products

Product	Versions
Db2 Big SQL on Cloud Pak for DataIBM	IBM Db2 Big SQL 7.6 on Cloud Pak for Data 4.8 through 2.1.0Affected IBM Db2 Big SQL 7.7 on Cloud Pak for Data 5.0Affected IBM Db2 Big SQL 7.8 on Cloud Pak for Data 5.1Affected

References

https://www.ibm.com/support/pages/node/7257907vendor-advisorypatch

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.