CVE-2014-3042
IBM CICS Transaction Server 3.1-5.1 - Authenticated Denial of Service via Invalid 3270 Data Stream
Title source: llmDescription
IBM CICS Transaction Server 3.1, 3.2, 4.1, 4.2, and 5.1 on z/OS does not properly implement CEMT transactions, which allows remote authenticated users to cause a denial of service (storage overlay) by using a 3270 emulator to send an invalid 3270 data stream.
References (7)
Core 7
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/67944
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/59242
Various Sources vendor-advisory
x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1PI16726
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/93338
Various Sources vendor-advisory
x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1PI16710
Various Sources vendor-advisory
x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1PI16727
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21675195
Scores
EPSS
0.0142
EPSS Percentile
69.6%
Details
CWE
CWE-119
Status
published
Products (5)
ibm/cics_transaction_server
ibm/cics_transaction_server
3.1
ibm/cics_transaction_server
3.2
ibm/cics_transaction_server
4.1
ibm/cics_transaction_server
5.1
Published
Jun 10, 2014
Tracked Since
Feb 18, 2026