CVE-2024-39724
Unknown Unknown - Not Provided
Resource Exhaustion Vulnerability in IBM Db2 Big SQL Causing DoS

Publication date: 2026-02-04

Last updated on: 2026-02-04

Assigner: IBM Corporation

Description
IBM Db2 Big SQL on Cloud Pak for Data versions 7.6 (on CP4D 4.8), 7.7 (on CP4D 5.0), and 7.8 (on CP4D 5.1) do not properly limit the allocation of system resources. An authenticated user with internal knowledge of the environment could exploit this weakness to cause a denial of service.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-02-04
Last Modified
2026-02-04
Generated
2026-06-16
AI Q&A
2026-02-04
EPSS Evaluated
2026-06-14
NVD
CVE-2024-39724
EUVD
EUVD-2024-55395
Affected Vendors & Products
Showing 3 associated CPEs
Vendor Product Version / Range
ibm db2_big_sql 7.6
ibm db2_big_sql 7.7
ibm db2_big_sql to 5.1 (inc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-770 The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Compliance Impact

I don't know

Detection Guidance

There is no specific information provided about detection methods or commands to identify this vulnerability on your network or system.

Executive Summary

CVE-2024-39724 is a vulnerability in IBM Db2 Big SQL on Cloud Pak for Data versions 7.8 and earlier. It occurs because the system does not properly limit resource allocation due to a lack of throttling on an API.

This flaw allows an authenticated user who has internal knowledge of the system to cause a denial of service (DoS) by exhausting system resources.

The vulnerability is classified under CWE-770: Allocation of Resources Without Limits or Throttling.

Impact Analysis

This vulnerability can impact you by allowing an authenticated user with some internal knowledge to cause a denial of service (DoS) condition.

The attacker can exhaust system resources, making the affected IBM Db2 Big SQL service unavailable or degraded, which impacts availability.

There is no impact on confidentiality or integrity, but the availability of the service is highly affected.

Mitigation Strategies

The recommended immediate step to mitigate this vulnerability is to upgrade IBM Db2 Big SQL to version 8.2 or later, which is available on Cloud Pak for Data 5.2 or later.

No workarounds or other mitigations are provided, so upgrading is the primary remediation.

It is also advised to assess the impact of this vulnerability in your environment.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2024-39724. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart