← Back

CVE-2025-1330

nvd nist
Published: May 8, 2025Modified: Jun 5, 2025

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: psirt@us.ibm.com (Secondary)

Description

IBM CICS TX Standard 11.1 and IBM CICS TX Advanced 10.1 and 11.1  could allow a local user to execute arbitrary code on the system due to failure to handle DNS return requests by the gethostbyname function.

Affected (25)

Products: Ibm: Cics Tx
Ibm
1 product
Cics Tx
Configuration A
25 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Ibm
Cics Tx
Version 11.1.0.0
Cics Tx
Version 11.1.0.0 interim_fix_10
Cics Tx
Version 11.1.0.0 interim_fix_11
Cics Tx
Version 11.1.0.0 interim_fix_12
Cics Tx
Version 11.1.0.0 interim_fix_13
Cics Tx
Version 11.1.0.0 interim_fix_14
Cics Tx
Version 11.1.0.0 interim_fix_15
Cics Tx
Version 11.1.0.0 interim_fix_16
Cics Tx
Version 11.1.0.0 interim_fix_17
Cics Tx
Version 11.1.0.0 interim_fix_18
Cics Tx
Version 11.1.0.0 interim_fix_19
Cics Tx
Version 11.1.0.0 interim_fix_1
Cics Tx
Version 11.1.0.0 interim_fix_20
Cics Tx
Version 11.1.0.0 interim_fix_21
Cics Tx
Version 11.1.0.0 interim_fix_22
Cics Tx
Version 11.1.0.0 interim_fix_23
Cics Tx
Version 11.1.0.0 interim_fix_24
Cics Tx
Version 11.1.0.0 interim_fix_2
Cics Tx
Version 11.1.0.0 interim_fix_3
Cics Tx
Version 11.1.0.0 interim_fix_4
Cics Tx
Version 11.1.0.0 interim_fix_5
Cics Tx
Version 11.1.0.0 interim_fix_6
Cics Tx
Version 11.1.0.0 interim_fix_7
Cics Tx
Version 11.1.0.0 interim_fix_8
Cics Tx
Version 11.1.0.0 interim_fix_9
Running on/withPlatform Versions
Linux
Linux Kernel
All versions

Related CWEs

CWE-787
Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.

References (2)

Source: psirt@us.ibm.com
Vendor Advisory
Source: psirt@us.ibm.com
Vendor Advisory

Timeline

No history available yet.