{"id":"CVE-2016-2946","aliases":["EUVD-2016-4019","GHSA-85m4-wpg4-w8mj"],"status":"published","title":"Stack-based buffer overflow in the ax Shared Libraries in the Agent in IBM Tivoli Monitoring (ITM...","description":"Stack-based buffer overflow in the ax Shared Libraries in the Agent in IBM Tivoli Monitoring (ITM) 6.2.2 before FP9, 6.2.3 before FP5, and 6.3.0 before FP2 on Linux and UNIX allows local users to gain privileges via unspecified vectors.","severity":{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.00406,"percentile":0.35148,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-119"],"published":"2016-12-01T11:00:00Z","modified":"2026-06-17T00:44:42Z","products":[{"vendor":"ibm","product":"tivoli_monitoring"}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IV85845","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred","Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21984578","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92389","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-2946"},{"url":"https://github.com/advisories/GHSA-85m4-wpg4-w8mj"}],"sources":{"cve":[{"id":"CVE-2016-2946","description":"Stack-based buffer overflow in the ax Shared Libraries in the Agent in IBM Tivoli Monitoring (ITM) 6.2.2 before FP9, 6.2.3 before FP5, and 6.3.0 before FP2 on Linux and UNIX allows local users to gain privileges via unspecified vectors.","status":"published","published":"2016-12-01T11:00:00Z","modified":"2024-08-05T23:40:13.861Z","updated_at":"2026-11-02T14:33:33.424551Z"}],"euvd":[{"id":"EUVD-2016-4019","description":"Stack-based buffer overflow in the ax Shared Libraries in the Agent in IBM Tivoli Monitoring (ITM) 6.2.2 before FP9, 6.2.3 before FP5, and 6.3.0 before FP2 on Linux and UNIX allows local users to gain privileges via unspecified vectors.","status":"published","published":"2016-12-01T11:00:00Z","modified":"2024-08-05T23:40:13Z","updated_at":"2026-11-03T02:22:51.669902Z"}],"ghsa":[{"id":"GHSA-85m4-wpg4-w8mj","title":"Stack-based buffer overflow in the ax Shared Libraries in the Agent in IBM Tivoli Monitoring (ITM...","description":"Stack-based buffer overflow in the ax Shared Libraries in the Agent in IBM Tivoli Monitoring (ITM) 6.2.2 before FP9, 6.2.3 before FP5, and 6.3.0 before FP2 on Linux and UNIX allows local users to gain privileges via unspecified vectors.","status":"published","published":"2022-05-17T03:35:35Z","modified":"2023-01-27T05:08:43Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:43:20.035173Z"}],"nvd":[{"id":"CVE-2016-2946","description":"Stack-based buffer overflow in the ax Shared Libraries in the Agent in IBM Tivoli Monitoring (ITM) 6.2.2 before FP9, 6.2.3 before FP5, and 6.3.0 before FP2 on Linux and UNIX allows local users to gain privileges via unspecified vectors.","status":"published","published":"2016-12-01T11:59:00.18Z","modified":"2026-06-17T00:44:42.7Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:03:32.79141Z"}]}}