CVE-2022-47990 IBM AIX denial of service

2023-01-1818:19:12

CWE-120

ibm

www.cve.org

ibm

aix

buffer overflow

6.2 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.9 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

IBM AIX 7.1, 7.2, 7.3 and VIOS , 3.1 could allow a non-privileged local user to exploit a vulnerability in X11 to cause a buffer overflow that could result in a denial of service or arbitrary code execution. IBM X-Force ID: 243556.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "AIX",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "7.1, 7.2, 7.3, VIOS 3.1"
      }
    ]
  }
]