Fixes to common vulnerabilities found in IBM Db2 High Performance Unload
Summary
| CVE | CVE-2025-33126 |
|---|---|
| State | PUBLISHED |
| Assigner | ibm |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2025-10-28 00:15:37 UTC |
| Updated | 2026-10-08 11:10:00 UTC |
| Description | IBM DB2 High Performance Unload 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, 5.1, 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, 5.1, 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, 5.1, 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, and 5.1 could allow an authenticated user to cause the program to crash due to the incorrect calculation of a buffer size. |
Risk And Classification
Primary CVSS: v3.1 6.5 MEDIUM from [email protected]
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Problem Types: CWE-131 | CWE-131 CWE-131 Incorrect Calculation of Buffer Size
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 3.1 | [email protected] | Secondary | 6.5 | MEDIUM | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
| 3.1 | CNA | CVSS | 6.5 | MEDIUM | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
CVSS v3.1 Breakdown
Attack Vector
NetworkAttack Complexity
LowPrivileges Required
LowUser Interaction
NoneScope
UnchangedConfidentiality
NoneIntegrity
NoneAvailability
HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Ibm | Aix | - | All | All | All |
| Application | Ibm | Db2 High Performance Unload Load | 6.1.0.1 | - | All | All |
| Application | Ibm | Db2 High Performance Unload Load | 6.1.0.2 | - | All | All |
| Application | Ibm | Db2 High Performance Unload Load | 6.1.0.3 | - | All | All |
| Application | Ibm | Db2 High Performance Unload Load | 6.5.0.0 | All | All | All |
| Application | Ibm | Db2 High Performance Unload Load | 6.5.0.0 | if1 | All | All |
| Application | Ibm | Db2 High Performance Unload Load | All | All | All | All |
| Operating System | Ibm | Linux On Ibm Z | - | All | All | All |
| Operating System | Linux | Linux Kernel | - | All | All | All |
| Operating System | Microsoft | Windows | - | All | All | All |
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | IBM | DB2 High Performance Unload | affected 6.1.0.3 | Not specified |
| CNA | IBM | DB2 High Performance Unload | affected 5.1.0.1 | Not specified |
| CNA | IBM | DB2 High Performance Unload | affected 6.1.0.2 | Not specified |
| CNA | IBM | DB2 High Performance Unload | affected 6.5 | Not specified |
| CNA | IBM | DB2 High Performance Unload | affected 6.5.0.0 IF1 | Not specified |
| CNA | IBM | DB2 High Performance Unload | affected 6.1.0.1 | Not specified |
| CNA | IBM | DB2 High Performance Unload | affected 6.1 | Not specified |
| CNA | IBM | DB2 High Performance Unload | affected 5.1 | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| www.ibm.com/support/pages/node/7249336 | [email protected] | www.ibm.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Additional Advisory Data
Solutions
CNA: Remediation/Fixes Please download and install Interim Fix 12.1.0.0.1 from Fix Central
There are currently no legacy QID mappings associated with this CVE.