Description
IBM CICS Transaction Server 3.1, 3.2, 4.1, 4.2, and 5.1 on z/OS does not properly implement CEMT transactions, which allows remote authenticated users to cause a denial of service (storage overlay) by using a 3270 emulator to send an invalid 3270 data stream.
References
- PI16710 vendor-advisory
- 67944 vdb-entry
- PI16727 vendor-advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21675195
- 59242 third-party-advisory
- PI16726 vendor-advisory
- ibm-cicsts-cve20143042-overlay(93338) vdb-entry