IBM CICS TX Standard 11.1 and IBM CICS TX Advanced 10.1 and 11.1 could allow a local user to execute arbitrary code on the system due to failure to handle DNS return requests by the gethostbyname function.
2025-05-08T22:15:18.173
2025-06-05T14:29:17.697
Analyzed
CVSSv3.1: 7.8 (HIGH)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | ibm | cics_tx | 11.1.0.0 | Yes |
| Application | ibm | cics_tx | 11.1.0.0 | Yes |
| Application | ibm | cics_tx | 11.1.0.0 | Yes |
| Application | ibm | cics_tx | 11.1.0.0 | Yes |
| Application | ibm | cics_tx | 11.1.0.0 | Yes |
| Application | ibm | cics_tx | 11.1.0.0 | Yes |
| Application | ibm | cics_tx | 11.1.0.0 | Yes |
| Application | ibm | cics_tx | 11.1.0.0 | Yes |
| Application | ibm | cics_tx | 11.1.0.0 | Yes |
| Application | ibm | cics_tx | 11.1.0.0 | Yes |
| Application | ibm | cics_tx | 11.1.0.0 | Yes |
| Application | ibm | cics_tx | 11.1.0.0 | Yes |
| Application | ibm | cics_tx | 11.1.0.0 | Yes |
| Application | ibm | cics_tx | 11.1.0.0 | Yes |
| Application | ibm | cics_tx | 11.1.0.0 | Yes |
| Application | ibm | cics_tx | 11.1.0.0 | Yes |
| Application | ibm | cics_tx | 11.1.0.0 | Yes |
| Application | ibm | cics_tx | 11.1.0.0 | Yes |
| Application | ibm | cics_tx | 11.1.0.0 | Yes |
| Application | ibm | cics_tx | 11.1.0.0 | Yes |
| Application | ibm | cics_tx | 11.1.0.0 | Yes |
| Application | ibm | cics_tx | 11.1.0.0 | Yes |
| Application | ibm | cics_tx | 11.1.0.0 | Yes |
| Application | ibm | cics_tx | 11.1.0.0 | Yes |
| Application | ibm | cics_tx | 11.1.0.0 | Yes |
| Operating System | linux | linux_kernel | - | No |