What is the CVSS score of EUVD-2024-55643?

EUVD-2024-55643 has a CVSS 3.1 base score of 6.5 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.2%.

Is there a patch available for EUVD-2024-55643?

Yes, a patch is available for EUVD-2024-55643. Update the affected software to the latest version immediately.

Db2 On Cloud Pak For Data And Db2 Warehouse On Cloud Pak For Data EUVD-2024-55643

| CVE-2024-54178 MEDIUM

Allocation of Resources Without Limits or Throttling (CWE-770)

2026-06-22 ibm

GHSA-jrvc-6c8f-586h

IBM Denial Of Service Db2 On Cloud Pak For Data And Db2 Warehouse On Cloud Pak For Data

6.5

CVSS 3.1 · Vendor: ibm

Severity by source

Vendor (ibm) PRIMARY

6.5 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Primary rating from Vendor (ibm) · only source for this CVE.

CVSS VectorVendor: ibm

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

CVE Published

Jun 22, 2026 - 13:15 cve.org

MEDIUM 6.5

DescriptionCVE.org

AnalysisAI

IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data versions 4.8,5.0,5.1,5.2,5.3 could allow an authenticated user to cause a denial of service when creating new databases due to. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. This Allocation of Resources Without Limits vulnerability could allow attackers to exhaust system resources through uncontrolled allocation.

Technical ContextAI

This vulnerability is classified as Allocation of Resources Without Limits (CWE-770), which allows attackers to exhaust system resources through uncontrolled allocation. IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data versions 4.8,5.0,5.1,5.2,5.3 could allow an authenticated user to cause a denial of service when creating new databases due to improper allocation of resources. Affected products include: Ibm Db2 On Cloud Pak For Data And Db2 Warehouse On Cloud Pak For Data.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Set resource limits, implement rate limiting, validate input sizes.