CVE-2016-2946: Buffer Overflow
First published: Thu Dec 01 2016(Updated: )
Stack-based buffer overflow in the ax Shared Libraries in the Agent in IBM Tivoli Monitoring (ITM) 6.2.2 before FP9, 6.2.3 before FP5, and 6.3.0 before FP2 on Linux and UNIX allows local users to gain privileges via unspecified vectors.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Tivoli Monitoring | =6.2.2 | |
| IBM Tivoli Monitoring | =6.2.2.1 | |
| IBM Tivoli Monitoring | =6.2.2.2 | |
| IBM Tivoli Monitoring | =6.2.2.3 | |
| IBM Tivoli Monitoring | =6.2.2.4 | |
| IBM Tivoli Monitoring | =6.2.2.5 | |
| IBM Tivoli Monitoring | =6.2.2.6 | |
| IBM Tivoli Monitoring | =6.2.2.7 | |
| IBM Tivoli Monitoring | =6.2.2.8 | |
| IBM Tivoli Monitoring | =6.2.2.9 | |
| IBM Tivoli Monitoring | =6.2.3 | |
| IBM Tivoli Monitoring | =6.3.0 | |
| Linux Kernel |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2016-2946?
CVE-2016-2946 is classified as a high severity vulnerability due to its potential for privilege escalation.
How do I fix CVE-2016-2946?
To fix CVE-2016-2946, update IBM Tivoli Monitoring to version 6.2.2 FP9 or later, 6.2.3 FP5 or later, or 6.3.0 FP2 or later.
Who is impacted by CVE-2016-2946?
CVE-2016-2946 affects local users on systems running vulnerable versions of IBM Tivoli Monitoring.
What versions of IBM Tivoli Monitoring are vulnerable to CVE-2016-2946?
IBM Tivoli Monitoring versions 6.2.2 before FP9, 6.2.3 before FP5, and 6.3.0 before FP2 are vulnerable to CVE-2016-2946.
What type of vulnerability is CVE-2016-2946?
CVE-2016-2946 is a stack-based buffer overflow vulnerability.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/remedy
- agent/severity
- agent/author
- agent/last-modified-date
- agent/references
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/ibm
- canonical/ibm tivoli monitoring
- version/ibm tivoli monitoring/6.2.2
- version/ibm tivoli monitoring/6.2.2.1
- version/ibm tivoli monitoring/6.2.2.2
- version/ibm tivoli monitoring/6.2.2.3
- version/ibm tivoli monitoring/6.2.2.4
- version/ibm tivoli monitoring/6.2.2.5
- version/ibm tivoli monitoring/6.2.2.6
- version/ibm tivoli monitoring/6.2.2.7
- version/ibm tivoli monitoring/6.2.2.8
- version/ibm tivoli monitoring/6.2.2.9
- version/ibm tivoli monitoring/6.2.3
- version/ibm tivoli monitoring/6.3.0
- vendor/linux
- canonical/linux kernel