CVE-2025-33131: Fixes to common vulnerabilities found in IBM Db2 High Performance Unload
IBM DB2 High Performance Unload 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, and 5.1 could allow an authenticated user to cause the program to crash due to a buffer being overwritten when it is allocated on the stack.
Other sources
IBM Db2 High Performance Unload could allow an authenticated user to cause the program to crash due to a buffer being overwritten when it is allocated on the stack.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Db2 High Performance Unloadto a version that resolves this vulnerability.Fixed in 12.1.0.0.1Patch Interim Fix 12.1.0.0.1
Event History
Frequently Asked Questions
What is the severity of CVE-2025-33131?
CVE-2025-33131 is considered a high severity vulnerability due to potential crashes caused by buffer overwrites.
How do I fix CVE-2025-33131?
To fix CVE-2025-33131, apply the latest patches provided by IBM for affected versions of IBM Db2 High Performance Unload.
Which versions are affected by CVE-2025-33131?
CVE-2025-33131 affects IBM Db2 High Performance Unload versions 5.1 through 6.1.0.3 and specific 6.5 versions.
What impact does CVE-2025-33131 have on my system?
CVE-2025-33131 can lead to system instability and crashes for authenticated users, potentially disrupting operations.
Is there a workaround for CVE-2025-33131?
Currently, the best approach for CVE-2025-33131 is to upgrade to a patched version as no stable workarounds are recommended.