CVE-2016-5985: IBM Tivoli Storage Manager

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

The IBM Tivoli Storage Manager (IBM Spectrum Protect) AIX client is vulnerable to a buffer overflow when Journal-Based Backup is enabled. A local attacker could overflow a buffer and execute arbitrary code on the system or cause a system crash.

Affected products

• IBM Tivoli Storage Manager: up to and including 7.1.6.2; version 7.1.0.0 only; up to and including 6.4.3.3; version 6.4.0.0 only; up to and including 6.3.2.5; version 6.3.0.0 only; …

Published 2017-02-01. Last modified 2026-06-17.