AIX (IJ54257)

The version of AIX installed on the remote host is prior to APAR IJ54257. It is, therefore, affected by a vulnerability as referenced in the IJ54257 advisory. - xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free. CVE-2022-49043 Note that Nessus has not tested for this...

Security Bulletin: AIX is vulnerable to information disclosure (CVE-2024-13176) or arbitrary code execution or a denial of service (CVE-2024-9143) due to OpenSSL

Summary Vulnerabilities in OpenSSL could allow an attacker to recover a private key CVE-2024-13176 or execute arbitrary code or cause a denial of service CVE-2024-9143. OpenSSL is used by AIX as part of AIX's secure network communications. Vulnerability Details CVEID:CVE-2024-13176 DESCRIPTION:...

Security Bulletin: AIX is vulnerable to denial of service (CVE-2024-47102, CVE-2024-52906)

Summary Vulnerabilities in the AIX TCP/IP and perfstat kernel extensions may lead to a denial of service CVE-2024-47102, CVE-2024-52906. Vulnerability Details CVEID:CVE-2024-47102 DESCRIPTION: IBM AIX could allow a non-privileged local user to exploit a vulnerability in the AIX perfstat kernel...

AIX : Multiple Vulnerabilities (IJ52977)

The version of AIX installed on the remote host is prior to APAR IJ52977. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ52977 advisory. - IBM AIX 7.2, 7.3, VIOS 3.1, and 4.1 could allow a non-privileged local user to exploit a vulnerability in the TCP/IP kernel...

AIX : Multiple Vulnerabilities (IJ52366)

The version of AIX installed on the remote host is prior to APAR IJ52366. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ52366 advisory. - IBM AIX 7.2, 7.3, VIOS 3.1, and 4.1 could allow a non-privileged local user to exploit a vulnerability in the TCP/IP kernel...

AIX : Multiple Vulnerabilities (IJ52610)

The version of AIX installed on the remote host is prior to APAR IJ52610. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ52610 advisory. - IBM AIX 7.2, 7.3, VIOS 3.1, and 4.1 could allow a non-privileged local user to exploit a vulnerability in the TCP/IP kernel...

AIX : Multiple Vulnerabilities (IJ52978)

The version of AIX installed on the remote host is prior to APAR IJ52978. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ52978 advisory. - IBM AIX 7.2, 7.3, VIOS 3.1, and 4.1 could allow a non-privileged local user to exploit a vulnerability in the TCP/IP kernel...

AIX : Multiple Vulnerabilities (IJ53001)

The version of AIX installed on the remote host is prior to APAR IJ53001. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ53001 advisory. - IBM AIX 7.2, 7.3, VIOS 3.1, and 4.1 could allow a non-privileged local user to exploit a vulnerability in the TCP/IP kernel...

AIX : Multiple Vulnerabilities (IJ52421)

The version of AIX installed on the remote host is prior to APAR IJ52421. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ52421 advisory. - IBM AIX 7.2, 7.3, VIOS 3.1, and 4.1 could allow a non-privileged local user to exploit a vulnerability in the TCP/IP kernel...

AIX : Multiple Vulnerabilities (IJ52999)

The version of AIX installed on the remote host is prior to APAR IJ52999. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ52999 advisory. - IBM AIX 7.2, 7.3, VIOS 3.1, and 4.1 could allow a non-privileged local user to exploit a vulnerability in the TCP/IP kernel...

AIX : Multiple Vulnerabilities (IJ52533)

The version of AIX installed on the remote host is prior to APAR IJ52533. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ52533 advisory. - IBM AIX 7.2, 7.3, VIOS 3.1, and 4.1 could allow a non-privileged local user to exploit a vulnerability in the TCP/IP kernel...

Security Bulletin: AIX is vulnerable to arbitrary command execution (CVE-2024-56346, CVE-2024-56347)

Summary UPDATED 4/10: The included README was updated for clarity. Vulnerabilities in AIX could allow a remote attacker to execute arbitrary commands CVE-2024-56346, CVE-2024-56347. Vulnerability Details CVEID:CVE-2024-56346 DESCRIPTION: IBM AIX nimesis NIM master service could allow a remote...

Security Bulletin: AIX is vulnerable to a privilege escalation vulnerability due to invscout (CVE-2022-36768)

Summary A vulnerability in the AIX invscout command could allow a non-privileged local user to obtain root privileges CVE-2022-36768. Vulnerability Details CVEID:CVE-2022-36768 DESCRIPTION: IBM AIX could allow a non-privileged local user to exploit a vulnerability in the invscout command to obtai...

Security Bulletin: AIX is vulnerable to a privilege escalation vulnerability (CVE-2022-34356)

Summary UPDATED Oct 10 Added iFixes with the correct prereqs for VIOS 3.1.2.30 and 3.1.2.40: A vulnerability in the AIX kernel could allow a non-privileged local user to obtain root privileges CVE-2022-34356. Vulnerability Details CVEID:CVE-2022-34356 DESCRIPTION: IBM AIX could allow a...

CVE-2024-56347

IBM AIX 7.2 and 7.3 nimsh service SSL/TLS protection mechanisms could allow a remote attacker to execute arbitrary commands due to improper process controls...

CVE-2024-56346

IBM AIX 7.2 and 7.3 nimesis NIM master service could allow a remote attacker to execute arbitrary commands due to improper process controls...

Vulnerabilities fixed in IBM AIX

IBM has fixed vulnerabilities in IBM AIX Specifically for versions 7.2 and 7.3. The vulnerabilities are in the NIM master service and the nimsh service's SSL/TLS protection mechanisms in IBM AIX versions 7.2 and 7.3. These vulnerabilities can be exploited by remote malicious actors to execute...

AIX : Multiple Vulnerabilities (IJ53757) (deprecated)

The vendor has closed the APAR as a program error. %NASLMINLEVEL 80900 C Tenable, Inc. Disabled on 2026/02/12. Advisory states "Closed as program error" and "Removed security issue." include'compat.inc'; if description scriptid232951; scriptversion"1.5";...

AIX : Multiple Vulnerabilities (IJ53929)

The version of AIX installed on the remote host is prior to APAR IJ53929. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ53929 advisory. - IBM AIX 7.2 and 7.3 nimsh service SSL/TLS protection mechanisms could allow a remote attacker to execute arbitrary commands due...

AIX : Multiple Vulnerabilities (IJ53792) (deprecated)

The vendor has closed the APAR/removed the security issue. %NASLMINLEVEL 80900 C Tenable, Inc. Disabled on 2026/02/17. Advisory states "Closed" and "Removed security issue." include'compat.inc'; if description scriptid232950; scriptversion"1.5"; scriptsetattributeattribute:"pluginmodificationdate...