CVE-2026-18096

IBM Db2 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a local attacker to cause a denial of service due to a memory leak.

CVSS v3 3.3 LOW

3.3^/10

CVSS v3 : LOW

Vector :

Exploitability : 1.8 / Impact : 1.4

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References

Link	Resource
https://www.ibm.com/support/pages/node/7282953	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:ibm:db2:12.1.5:::::linux::
	cpe:2.3:a:ibm:db2:12.1.5:::::unix::
	cpe:2.3:a:ibm:db2:12.1.5:::::windows::

History

23 Oct 2026, 19:10

Type	Values Removed	Values Added
Summary		(es) IBM Db2 12.1.5 para Linux, UNIX y Windows (incluye DB2 Connect Servidor) podría permitir a un atacante local causar una denegación de servicio debido a una fuga de memoria.

Information

Published : 2026-08-12 21:17

Updated : 2026-10-23 19:10

NVD link : CVE-2026-18096

Mitre link : CVE-2026-18096

CVE.ORG link : CVE-2026-18096

JSON object : View

Products Affected

ibm

db2

CWE

CWE-770

Allocation of Resources Without Limits or Throttling

{"id": "CVE-2026-18096", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-18096", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-13T14:08:08.583733Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@us.ibm.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.3, "attackVector": "LOCAL", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 1.8}]}, "affected": [{"source": "psirt@us.ibm.com", "affectedData": [{"cpes": ["cpe:2.3:a:ibm:db2:12.1.5:*:*:*:*:*:*:*"], "vendor": "IBM", "product": "Db2", "versions": [{"status": "affected", "version": "12.1.5"}]}]}], "published": "2026-08-12T21:17:36.813", "references": [{"url": "https://www.ibm.com/support/pages/node/7282953", "tags": ["Vendor Advisory"], "source": "psirt@us.ibm.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@us.ibm.com", "description": [{"lang": "en", "value": "CWE-770"}]}], "descriptions": [{"lang": "en", "value": "IBM Db2 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a local attacker to cause a denial of service due to a memory leak."}, {"lang": "es", "value": "IBM Db2 12.1.5 para Linux, UNIX y Windows (incluye DB2 Connect Servidor) podr\u00eda permitir a un atacante local causar una denegaci\u00f3n de servicio debido a una fuga de memoria."}], "lastModified": "2026-10-23T19:10:00.167", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:db2:12.1.5:*:*:*:*:linux:*:*", "vulnerable": true, "matchCriteriaId": "27856144-CF8F-47BD-B48F-73DED6DF842C"}, {"criteria": "cpe:2.3:a:ibm:db2:12.1.5:*:*:*:*:unix:*:*", "vulnerable": true, "matchCriteriaId": "90A5540D-985A-4599-88FA-F9CFBF3825BA"}, {"criteria": "cpe:2.3:a:ibm:db2:12.1.5:*:*:*:*:windows:*:*", "vulnerable": true, "matchCriteriaId": "AC20E821-3B45-4AD6-A80A-713E686D69D1"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@us.ibm.com"}