IBM InfoSphere Data Replication VSAM for z/OS Remote Source Stack-Based Buffer Overflow Vulnerability

A stack-based buffer overflow vulnerability has been identified in IBM InfoSphere Data Replication VSAM for z/OS Remote Source version 11.4. This vulnerability arises from improper bounds checking, allowing a local user with access to files containing CECSUB or CECRM to overflow the buffer and execute arbitrary code on the system.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution on the affected system.

Remediation

This vulnerability has been resolved in APAR PH67757, available as version 11.4.0.22 for VSAM Remote Source x86 container on Fix Central.