CVE-2025-33132: Fixes to common vulnerabilities found in IBM Db2 High Performance Unload
IBM DB2 High Performance Unload 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, and 5.1 could allow an authenticated user to cause the program to crash due to the incorrect calculation of the size of the data that is being pointed to.
Other sources
IBM Db2 High Performance Unload could allow an authenticated user to cause the program to crash due to the incorrect calculation of the size of the data that is being pointed to.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Db2 High Performance Unloadto a version that resolves this vulnerability.Fixed in 12.1.0.0.1
Event History
Frequently Asked Questions
What is the severity of CVE-2025-33132?
CVE-2025-33132 has a moderate severity level due to the potential for program crashes affecting authenticated users.
How do I fix CVE-2025-33132?
To fix CVE-2025-33132, upgrade IBM DB2 High Performance Unload to a version above 6.1.0.3 or apply any available patches provided by IBM.
What products are affected by CVE-2025-33132?
CVE-2025-33132 affects various versions of IBM DB2 High Performance Unload, including versions up to 6.1.0.3 and 5.1.0.1.
Who can be impacted by CVE-2025-33132?
Authenticated users of IBM DB2 High Performance Unload can be impacted by CVE-2025-33132, potentially causing disruptions.
Is there any workaround for CVE-2025-33132?
Currently, the recommended mitigation for CVE-2025-33132 is to update to a patched version as there are no specified workarounds.