CVE-2025-1000

Description

IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 could allow an authenticated user to cause a denial of service when connecting to a z/OS database due to improper handling of automatic client rerouting.

CWE Name

Allocation of Resources Without Limits or Throttling

References 

https://security.netapp.com/advisory/ntap-20250516-0002/

https://www.ibm.com/support/pages/node/7232528

https://nvd.nist.gov/vuln/detail/CVE-2025-1000