PT-2025-20426 · Ibm · Ibm Cics Tx Standard+1

Published 2025-05-08 · Updated 2025-05-09 · CVE-2025-1330

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM CICS TX Standard versions 11.1 IBM CICS TX Advanced versions 10.1 through 11.1

Description The issue is due to the failure to handle DNS return requests by the gethostbyname function, which could allow a local user to execute arbitrary code on the system.

Recommendations For IBM CICS TX Standard version 11.1, update to a version that includes a fix for the issue with the gethostbyname function. For IBM CICS TX Advanced versions 10.1 through 11.1, update to a version that includes a fix for the issue with the gethostbyname function. As a temporary workaround, consider restricting access to the gethostbyname function until a patch is available.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2025-1330

Affected Products

Ibm Cics Tx Advanced

Ibm Cics Tx Standard

References · 9

• https://osv.dev/vulnerability/CVE-2025-1330 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-1330 · Security Note
• https://ibm.com/support/pages/node/7232923 · Vendor Advisory, Patch
• https://twitter.com/CVEnew/status/1920612448962257104 · Twitter Post
• https://t.me/cvenotify/121477 · Telegram Post
• https://ibm.com/support/pages/node/7232924 · Vendor Advisory, Patch
• https://twitter.com/cybercronai/status/1920991061528154331 · Twitter Post
• https://t.me/cvetracker/23404 · Telegram Post
• https://t.me/cvedetector/24885 · Telegram Post