Security Bulletin: AIX is vulnerable to a denial of service due to the AIX SMB client (CVE-2022-43381)

Summary

A vulnerability in the AIX SMB client daemon could allow a non-privileged local user to cause a denial of service (CVE-2022-43381). AIX uses the SMB client daemon to access files on SMB servers.

Vulnerability Details

CVEID:CVE-2022-43381
**DESCRIPTION:**IBM AIX could allow a non-privileged local user to exploit a vulnerability in the AIX SMB client to cause a denial of service.
CVSS Base score: 6.2
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/238639 for the current score.
CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)

Affected Products and Versions

The following fileset levels are vulnerable:

To determine if your system is vulnerable, execute the following commands:

lslpp -L | grep -i smbc.rte

Remediation/Fixes

FIXES

IBM strongly recommends addressing the vulnerability now.

The fixes can be downloaded via ftp or http from:

ftp://aix.software.ibm.com/aix/efixes/security/smbcd_fix2.tar

<http://aix.software.ibm.com/aix/efixes/security/smbcd_fix2.tar&gt;

<https://aix.software.ibm.com/aix/efixes/security/smbcd_fix2.tar&gt;

The latest SMB client fileset may also be downloaded from:

<https://www.ibm.com/resources/mrs/assets?source=aixbp&gt;

To extract the fixes from the tar file:

For AIX 7.1:

tar xvf smbcd_fix2.tar

gunzip smbc_302_fileset_71.tar.gz | tar xvf

For AIX 7.2, 7.3, and VIOS 3.1:

tar xvf smbcd_fix2.tar

gunzip smbc_302_fileset_72.tar.gz | tar xvf

IMPORTANT: If possible, it is recommended that a mksysb backup of the system be created. Verify it is both bootable and readable before proceeding.

To preview the fix installation:

installp -apYd . smbc

To install the fix package:

installp -aXYd . smbc

Verify you have retrieved the fixes intact:

The checksums below were generated using the “openssl dgst -sha256 [file]” command as the following:

These sums should match exactly. The OpenSSL signatures in the tar file and on this advisory can also be used to verify the integrity of the fixes. If the sums or signatures cannot be confirmed, contact IBM AIX Support at <https://ibm.com/support/&gt; and describe the discrepancy.

openssl dgst -sha256 -verify [pubkey_file] -signature [advisory_file].sig [advisory_file]

openssl dgst -sha256 -verify [pubkey_file] -signature [fix_file].sig [fix_file]

Published advisory OpenSSL signature file location:

<http://aix.software.ibm.com/aix/efixes/security/smbcd_advisory2.asc.sig&gt;

<https://aix.software.ibm.com/aix/efixes/security/smbcd_advisory2.asc.sig&gt;

ftp://aix.software.ibm.com/aix/efixes/security/smbcd_advisory2.asc.sig

Workarounds and Mitigations

None