AIX : Multiple Vulnerabilities (IJ48741)

The version of AIX installed on the remote host is prior to APAR IJ48741. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ48741 advisory. - IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the TCP/IP kernel extensio...

AIX : Multiple Vulnerabilities (IJ48737)

The version of AIX installed on the remote host is prior to APAR IJ48737. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ48737 advisory. - IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the TCP/IP kernel extensio...

Security Bulletin: AIX is vulnerable to denial of service vulnerabilities

Summary UPDATED: Additional iFixes are now available for AIX 7.2 TL5 SP5, 7.3 TL0 SP2, 7.3 TL0 SP3, 7.3 TL1 SP1, and VIOS 3.1.3.21, 3.1.3.30, and 3.1.4.10. Both the original and new iFixes address the kernel security vulnerabilities mentioned in the bulletin, but the new iFixes also address the...

CVE-2023-45165 IBM AIX denial of service

IBM AIX 7.2 and 7.3 could allow a non-privileged local user to exploit a vulnerability in the AIX SMB client to cause a denial of service. IBM X-Force ID: 267963...

AIX : Multiple Vulnerabilities (IJ48784)

The version of AIX installed on the remote host is prior to APAR IJ48784. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ48784 advisory. - IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the piodmgrsu command to...

AIX (IJ48540)

The version of AIX installed on the remote host is prior to APAR IJ48540. It is, therefore, affected by a vulnerability as referenced in the IJ48540 advisory. - IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in AIX windows to cause a denial of...

AIX (IJ48758)

The version of AIX installed on the remote host is prior to APAR IJ48758. It is, therefore, affected by a vulnerability as referenced in the IJ48758 advisory. - IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in AIX windows to cause a denial of...

Security Bulletin: AIX is vulnerable to a denial of service due to the AIX SMB client (CVE-2023-45165)

Summary A vulnerability in the AIX SMB client daemon could allow a non-privileged local user to cause a denial of service CVE-2023-45165. AIX uses the SMB client daemon to access files on SMB servers. Vulnerability Details CVEID:CVE-2023-45165 DESCRIPTION: IBM AIX could allow a non-privileged loc...

CVE-2023-47161

IBM UrbanCode Deploy (UCD) is affected by CVE-2023-47161 due to mishandling input validation of an uploaded archive file, causing a denial of service from resource exhaustion. Affected versions are 7.0–7.0.5.18, 7.1–7.1.2.14, 7.2–7.2.3.7, and 7.3–7.3.2.2. Remediation guidance recommends upgrading...

CVE-2023-42015

IBM UrbanCode Deploy UCD 7.1 through 7.1.2.14, 7.2 through 7.2.3.7, and 7.3 through 7.3.2.2 is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure. IBM X-Force ID: 265512...

CVE-2023-47741

CVE-2023-47741 affects IBM Db2 Mirror for i web browser clients and IBM i web browser clients on IBM i 7.3–7.5 (and Db2 Mirror for i 7.4–7.5). The issue allows clear-text passwords to linger in browser memory and be viewable via tools before garbage collection, potentially enabling an attacker wi...

Security Bulletin: AIX is vulnerable to denial of service due to AIXWindows (CVE-2023-45172)

Summary A vulnerability in AIXwindows could allow a non-privileged local user to cause a denial of service CVE-2023-45172. Vulnerability Details CVEID:CVE-2023-45172 DESCRIPTION: IBM AIX could allow a non-privileged local user to exploit a vulnerability in AIXwindows to cause a denial of service...

PT-2023-8366 · Ibm · Aix +2

Name of the Vulnerable Software and Affected Versions: IBM AIX versions 7.2 through 7.3 VIOS version 3.1 Description: The issue is related to insufficient input validation in the AIX operating system, which could allow a non-privileged local user to exploit a vulnerability in AIX windows and caus...

Command injection

IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a privileged local user to exploit a vulnerability in the qdaemon command to escalate privileges or cause a denial of service. IBM X-Force ID: 267972...

Security Bulletin: IBM UrbanCode Deploy (UCD) is susceptible to an HTML injection vulnerability (CVE-2023-42015)

Summary IBM UrbanCode Deploy UCD is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure. Vulnerability Details CVEID:CVE-2023-42015 DESCRIPTION: IBM UrbanCode Deploy UCD is vulnerable ...

MGASA-2023-0335 Updated virtualbox packages fix security vulnerabilities and other bugs

This update fixes several security issues and other bugs, among them: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 7.0.12. Easily exploitable vulnerability allows high privileged attacker with logon t...

CVE-2023-42006

CVE-2023-42006 affects IBM Administration Runtime Expert for i (versions 7.2–7.5). The root cause is improper authority checks that could allow a local user to obtain sensitive information stored in files (e.g., passwords). The IBM bulletin lists affected releases 7.2–7.5 and provides a remediati...

CVE-2023-45168

Summary of CVE-2023-45168 (IBM AIX invscout): Affects IBM AIX versions 7.2 and 7.3 and VIOS 3.1. A local, non-privileged user can exploit a vulnerability in the invscout command to execute arbitrary commands. The vulnerability stems from the invscout component and has a high impact on confidentia...

Security Bulletin: IBM Administration Runtime Expert for i is vulnerable to an attacker obtaining sensitive information due to CVE-2023-42006

Summary IBM Administration Runtime Expert for i could allow sensitive information stored in a file, including passwords, to be obtained by an attacker as described in the vulnerability details section. IBM Administration Runtime Expert for i has addressed the vulnerability with a fix as described...

Intel® In-Band Manageability Software Advisory

Summary: A potential security vulnerability in some Intel® In-Band Manageability software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-41689 Description: Improper access control in some Inte...