CVE-2025-3354

Published: Aug 6, 2025Modified: Aug 13, 2025

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 20 is vulnerable to a heap-based buffer overflow, caused by improper bounds checking. A remote attacker could overflow a buffer and execute arbitrary code on the system or cause the server to crash.

Affected (21)

Products: Ibm: Tivoli Monitoring

Ibm

1 product

Tivoli Monitoring

Configuration A

21 vulnerable

Vulnerable Software	Affected Versions
Ibm Tivoli Monitoring	Version 6.3.0.7
Ibm Tivoli Monitoring	Version 6.3.0.7 sp10
Ibm Tivoli Monitoring	Version 6.3.0.7 sp11
Ibm Tivoli Monitoring	Version 6.3.0.7 sp12
Ibm Tivoli Monitoring	Version 6.3.0.7 sp13
Ibm Tivoli Monitoring	Version 6.3.0.7 sp14
Ibm Tivoli Monitoring	Version 6.3.0.7 sp15
Ibm Tivoli Monitoring	Version 6.3.0.7 sp16
Ibm Tivoli Monitoring	Version 6.3.0.7 sp17
Ibm Tivoli Monitoring	Version 6.3.0.7 sp18
Ibm Tivoli Monitoring	Version 6.3.0.7 sp19
Ibm Tivoli Monitoring	Version 6.3.0.7 sp1
Ibm Tivoli Monitoring	Version 6.3.0.7 sp20
Ibm Tivoli Monitoring	Version 6.3.0.7 sp2
Ibm Tivoli Monitoring	Version 6.3.0.7 sp3
Ibm Tivoli Monitoring	Version 6.3.0.7 sp4
Ibm Tivoli Monitoring	Version 6.3.0.7 sp5
Ibm Tivoli Monitoring	Version 6.3.0.7 sp6
Ibm Tivoli Monitoring	Version 6.3.0.7 sp7
Ibm Tivoli Monitoring	Version 6.3.0.7 sp8
Ibm Tivoli Monitoring	Version 6.3.0.7 sp9

Related CWEs

CWE-122

Heap-based Buffer Overflow

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

References (1)

https://www.ibm.com/support/pages/node/7241472

Source: psirt@us.ibm.com

Vendor Advisory

Timeline

No history available yet.