IBM Db2 versions 11.5.0 to 11.5.9 and 12.1.0 to 12.1.4 contain a vulnerability classified as CWE-770, where resource allocation is not properly limited or throttled during execution of specially crafted queries involving range partitioned tables. This can cause a denial of service by exhausting resources. The CVSS 3.1 base score is 5.5 (medium), with attack vector local, low attack complexity, requiring low privileges and no user interaction. The vulnerability affects availability only, with no impact on confidentiality or integrity. No patch or official remediation level has been published by IBM as of the data provided.

Successful exploitation results in denial of service due to resource exhaustion when processing specific queries on range partitioned tables in affected IBM Db2 versions. There is no impact on data confidentiality or integrity. The attack requires local access with low privileges and does not require user interaction. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the IBM vendor advisory for current remediation guidance. Until a fix is available, limit access to affected Db2 instances to trusted users with appropriate privileges and monitor for unusual query activity involving range partitioned tables. No official fix or temporary workaround has been published at this time.