CVE-2016-2946

Severity: high (CVSS 7.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-12-01 · updated 2026-06-17
Weakness: CWE-119

Description

Stack-based buffer overflow in the ax Shared Libraries in the Agent in IBM Tivoli Monitoring (ITM) 6.2.2 before FP9, 6.2.3 before FP5, and 6.3.0 before FP2 on Linux and UNIX allows local users to gain privileges via unspecified vectors.

Affected products

IBM Tivoli Monitoring: 6.2.2, 6.2.2.1, 6.2.2.2, 6.2.2.3, 6.2.2.4, 6.2.2.5 (+6)

References

http://www-01.ibm.com/support/docview.wss?uid=swg1IV85845
http://www-01.ibm.com/support/docview.wss?uid=swg21984578
http://www.securityfocus.com/bid/92389
http://www-01.ibm.com/support/docview.wss?uid=swg1IV85845
http://www-01.ibm.com/support/docview.wss?uid=swg21984578
http://www.securityfocus.com/bid/92389

Get alerted when CVE-2016-2946 or the next vulnerability affects your stack