Security Bulletin: Vulnerability in lscore affects AIX (CVE-2021-38991)

Summary There is a vulnerability in the lscore command that affects AIX. Vulnerability Details CVEID: CVE-2021-38991 DESCRIPTION: IBM AIX could allow a non-privileged local user to exploit a vulnerability in the lscore command which could lead to code execution. CVSS Base score: 8.4 CVSS Temporal...

Security Bulletin: Vulnerability in OpenSSL affects AIX (CVE-2021-3712)

Summary There is a vulnerability in OpenSSL used by AIX. Vulnerability Details CVEID: CVE-2021-3712 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information, caused by an out-of-bounds read when processing ASN.1 strings. By sending specially crafted data, an attacker cou...

Unable to use Veeam Agent for IBM AIX after LIBPATH variable has been changed

Article Applicability This article is relevant only to Veeam Agent for IBM AIX 13.0.2.2108 and lower. Starting in Veeam Agent for IBM AIX v13.1, the software resolves LIBPATH conflicts by configuring necessary aliases. Challenge In IBM AIX, it is possible to change the LIBPATH variable globally...

Security Bulletin: Vulnerability in Apache Log4j may affect IBM Spectrum Protect Operations Center (CVE-2021-44832)

Summary A vulnerability in Apache Log4j could result in remote code execution. This vulnerability may affect the Help system in IBM Spectrum Protect Operations Center. The below fix packages include Apache Log4j 2.17.1. Vulnerability Details CVEID: CVE-2021-44832 DESCRIPTION: Apache Log4j could...

CVE-2021-38991

IBM AIX 7.0, 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the lscore command which could lead to code execution. IBM X-Force ID: 212953...

Code injection

IBM AIX 7.0, 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the lscore command which could lead to code execution. IBM X-Force ID: 212953...

CVE-2021-38991

IBM AIX 7.0, 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the lscore command which could lead to code execution. IBM X-Force ID: 212953...

CVE-2021-38991

CVE-2021-38991 (IBM AIX/VIOS lscore vulnerability) A vulnerability in the IBM AIX lscore command (affecting AIX 7.0, 7.1, 7.2 and VIOS 3.1) can be triggered by a non-privileged local user due to an input validation error in lscore. Successful exploitation could lead to code execution with high im...

CVE-2021-38991: Undefined Security Weakness

IBM AIX 7.0, 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the lscore command which could lead to code execution. IBM X-Force ID: 212953...

AIX (IJ36806)

The version of AIX installed on the remote host is prior to APAR IJ36806. It is, therefore, affected by a vulnerability as referenced in the IJ36806 advisory. - IBM AIX 7.0, 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the lscore command which could...

AIX (IJ36815)

The version of AIX installed on the remote host is prior to APAR IJ36815. It is, therefore, affected by a vulnerability as referenced in the IJ36815 advisory. - IBM AIX 7.0, 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the lscore command which could...

AIX (IJ36805)

The version of AIX installed on the remote host is prior to APAR IJ36805. It is, therefore, affected by a vulnerability as referenced in the IJ36805 advisory. - IBM AIX 7.0, 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the lscore command which could...

AIX (IJ36816)

The version of AIX installed on the remote host is prior to APAR IJ36816. It is, therefore, affected by a vulnerability as referenced in the IJ36816 advisory. - IBM AIX 7.0, 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the lscore command which could...

AIX (IJ36810)

The version of AIX installed on the remote host is prior to APAR IJ36810. It is, therefore, affected by a vulnerability as referenced in the IJ36810 advisory. - IBM AIX 7.0, 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the lscore command which could...

CVE-2021-38990

IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the mount command which could lead to code execution. IBM X-Force ID: 212952...

CVE-2021-38990

IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the mount command which could lead to code execution. IBM X-Force ID: 212952...

CVE-2021-38990

IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the mount command which could lead to code execution. IBM X-Force ID: 212952...

Design/Logic Flaw

IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the mount command which could lead to code execution. IBM X-Force ID: 212952...

There is a vulnerability in the lscore command that affects AIX.,There is a vulnerability in the lscore command that affects VIOS.

IBM SECURITY ADVISORY First Issued: Mon Jan 10 13:18:02 CST 2022 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/lscoreadvisory.asc https://aix.software.ibm.com/aix/efixes/security/lscoreadvisory.asc...

PT-2022-10831

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.0 through 7.2 VIOS version 3.1 Description A vulnerability in the lscore command could allow a non-privileged local user to exploit it, leading to code execution. Recommendations For IBM AIX versions 7.0 through 7.2, conside...