Security Bulletin: Vulnerability in AIX affect OS Image for AIX shipped with Cloud Pak System (CVE-2022-22444)

Summary

Vulnerability in AIX affect OS Image for AIX shipped with Cloud Pak System. Cloud Pak System has addressed vulnerability.

Vulnerability Details

CVEID:CVE-2022-22444
**DESCRIPTION:**IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a local user to exploit a vulnerability in the lpd daemon to cause a denial of service. IBM X-Force ID: 224444.
CVSS Base score: 6.2
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/224444 for the current score.
CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)

Affected Products and Versions

Remediation/Fixes

For unsupported versions/releases of the product recommendation is to upgrade to supported version/release of the product.

The recommended solution is to apply fix as soon as practical.

Cloud Pak System release IBM Cloud Pak System v2.3.3.7 for Power provide new base image for AIX v.3.1.1.0 based on AIX 7.2 TL5 SP5.

For IBM Cloud Pak System V2.3.1.1, V2.3.2.0 for Power

upgrade to IBM Cloud Pak System V2.3.3.7 at Fix Central

Information on upgrading at : <https://www.ibm.com/support/pages/ibm-cloud-pak-system-upgrades-version-2337&gt;

Workarounds and Mitigations

None