Medium

Analysis Summary

CVE-2025-1329 CVSS:7.8

IBM CICS TX Standard and IBM CICS TX Advanced could allow a local user to execute arbitrary code on the system due to failure to handle DNS return requests by the gethostbyaddr function.

CVE-2025-1330 CVSS:7.8

IBM CICS TX Standard and IBM CICS TX could allow a local user to execute arbitrary code on the system due to failure to handle DNS return requests by the gethostbyname function.

CVE-2025-1331 CVSS:7.8

IBM CICS TX Standard and IBM CICS TX Advanced could allow a local user to execute arbitrary code on the system due to the use of unsafe use of the gets function.

Impact

• Code Execution

Indicators of Compromise

CVE

• CVE-2025-1329

• CVE-2025-1330

• CVE-2025-1331

Affected Vendors

Remediation

Refer to IBM Security Advisory for patch, upgrade or suggested workaround information.

IBM Security Advisory