Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Spectrum Protect Snapshot on AIX and Linux (CVE-2018-1890, CVE-2018-12547)

Summary Multiple vulnerabilities in IBM® Runtime Environment Java™ were disclosed as part of the IBM Java SDK updates in January 2019. IBM® Runtime Environment Java™ is used by IBM Spectrum Protect Snapshot formerly Tivoli Storage FlashCopy Manager on AIX and Linux. Vulnerability Details CVEID:...

Mageia: Security Advisory (MGASA-2019-0400)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: Vulnerability in lscore affects AIX (CVE-2021-38991)

Summary There is a vulnerability in the lscore command that affects AIX. Vulnerability Details CVEID: CVE-2021-38991 DESCRIPTION: IBM AIX could allow a non-privileged local user to exploit a vulnerability in the lscore command which could lead to code execution. CVSS Base score: 8.4 CVSS Temporal...

Security Bulletin: Vulnerability in OpenSSL affects AIX (CVE-2021-3712)

Summary There is a vulnerability in OpenSSL used by AIX. Vulnerability Details CVEID: CVE-2021-3712 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information, caused by an out-of-bounds read when processing ASN.1 strings. By sending specially crafted data, an attacker cou...

Unable to use Veeam Agent for IBM AIX after LIBPATH variable has been changed

Article Applicability This article is relevant only to Veeam Agent for IBM AIX 13.0.2.2108 and lower. Challenge In IBM AIX, it is possible to change the LIBPATH variable globally. However, doing so overrides the library loader domain configuration for all the applications running with system...

Security Bulletin: Vulnerability in Apache Log4j may affect IBM Spectrum Protect Operations Center (CVE-2021-44832)

Summary A vulnerability in Apache Log4j could result in remote code execution. This vulnerability may affect the Help system in IBM Spectrum Protect Operations Center. The below fix packages include Apache Log4j 2.17.1. Vulnerability Details CVEID: CVE-2021-44832 DESCRIPTION: Apache Log4j could...

CVE-2021-38991

IBM AIX 7.0, 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the lscore command which could lead to code execution. IBM X-Force ID: 212953...

Code injection

IBM AIX 7.0, 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the lscore command which could lead to code execution. IBM X-Force ID: 212953...

CVE-2021-38991

IBM AIX 7.0, 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the lscore command which could lead to code execution. IBM X-Force ID: 212953...

CVE-2021-38991

CVE-2021-38991 (IBM AIX/VIOS lscore vulnerability) A vulnerability in the IBM AIX lscore command (affecting AIX 7.0, 7.1, 7.2 and VIOS 3.1) can be triggered by a non-privileged local user due to an input validation error in lscore. Successful exploitation could lead to code execution with high im...

AIX (IJ36816)

The version of AIX installed on the remote host is prior to APAR IJ36816. It is, therefore, affected by a vulnerability as referenced in the IJ36816 advisory. - IBM AIX 7.0, 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the lscore command which could...

AIX (IJ36806)

The version of AIX installed on the remote host is prior to APAR IJ36806. It is, therefore, affected by a vulnerability as referenced in the IJ36806 advisory. - IBM AIX 7.0, 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the lscore command which could...

AIX (IJ36815)

The version of AIX installed on the remote host is prior to APAR IJ36815. It is, therefore, affected by a vulnerability as referenced in the IJ36815 advisory. - IBM AIX 7.0, 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the lscore command which could...

AIX (IJ36805)

The version of AIX installed on the remote host is prior to APAR IJ36805. It is, therefore, affected by a vulnerability as referenced in the IJ36805 advisory. - IBM AIX 7.0, 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the lscore command which could...

AIX (IJ36810)

The version of AIX installed on the remote host is prior to APAR IJ36810. It is, therefore, affected by a vulnerability as referenced in the IJ36810 advisory. - IBM AIX 7.0, 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the lscore command which could...

CVE-2021-38990

IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the mount command which could lead to code execution. IBM X-Force ID: 212952...

CVE-2021-38990

IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the mount command which could lead to code execution. IBM X-Force ID: 212952...

CVE-2021-38990

IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the mount command which could lead to code execution. IBM X-Force ID: 212952...

Design/Logic Flaw

IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the mount command which could lead to code execution. IBM X-Force ID: 212952...

There is a vulnerability in the lscore command that affects AIX.,There is a vulnerability in the lscore command that affects VIOS.

IBM SECURITY ADVISORY First Issued: Mon Jan 10 13:18:02 CST 2022 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/lscoreadvisory.asc https://aix.software.ibm.com/aix/efixes/security/lscoreadvisory.asc...