CVE-2025-1331

published 2025-05-08

CVE-2025-1331: IBM CICS TX Standard 11.1 and IBM CICS TX Advanced 10.1 and 11.1 could allow a local user to execute arbitrary code on the system due to the use of unsafe use…

high 7.8 CVSS 3.1

AV L AC L PR L UI N S U C H I H A H

IBM CICS TX Standard 11.1 and IBM CICS TX Advanced 10.1 and 11.1 could allow a local user to execute arbitrary code on the system due to the use of unsafe use of the gets function.

Affected

11 ranges

Vendor	Product	Version range	Fixed in
ibm	cics_tx	—	—
ibm	cics_tx_advanced	—	—
ibm	cics_tx_advanced	—	—
ibm	cics_tx_standard	—	—
linux	linux_kernel	>= 3.8.0 < 5.10.248	5.10.248
linux	linux_kernel	>= 5.11.0 < 5.15.198	5.15.198
linux	linux_kernel	>= 5.16.0 < 6.1.160	6.1.160
linux	linux_kernel	>= 6.13.0 < 6.17.12	6.17.12
linux	linux_kernel	>= 6.18.0 < 6.18.1	6.18.1
linux	linux_kernel	>= 6.2.0 < 6.6.120	6.6.120
linux	linux_kernel	>= 6.7.0 < 6.12.62	6.12.62

CWE-242