VulnerabilityModified
CVE-2016-2946
Stack-based buffer overflow in the ax Shared Libraries in the Agent in IBM Tivoli Monitoring (ITM) 6.2.2 before FP9, 6.2.3 before FP5, and 6.3.0 before FP2 on Linux and UNIX allows local users to gain privileges via unspecified vectors.
HIGH 7.8EPSS 0.41%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.41%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Stack-based buffer overflow in the ax Shared Libraries in the Agent in IBM Tivoli Monitoring (ITM) 6.2.2 before FP9, 6.2.3 before FP5, and 6.3.0 before FP2 on Linux and UNIX allows local users to gain privileges via unspecified vectors.
- CVSS 3.0
- 7.8 HIGHCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.41% probability · 34th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- ibm/tivoli monitoring
- Source
- psirt@us.ibm.com
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV85845Broken Link
- http://www-01.ibm.com/support/docview.wss?uid=swg21984578Patch, Vendor Advisory
- http://www.securityfocus.com/bid/92389Third Party Advisory, VDB Entry
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV85845Broken Link
- http://www-01.ibm.com/support/docview.wss?uid=swg21984578Patch, Vendor Advisory
- http://www.securityfocus.com/bid/92389Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.