AIX 7.2 TL 0 : freebsd (IJ09622)

https://vulners.com/cve/CVE-2018-6922 https://vulners.com/cve/CVE-2018-6922 FreeBSD is vulnerable to a denial of service, caused by the use of an inefficient TCP reassembly algorithm. By sending specially-crafted TCP traffic, a remote attacker could exploit this vulnerability to consume all...

AIX 7.2 TL 3 : freebsd (IJ09625)

https://vulners.com/cve/CVE-2018-6922 https://vulners.com/cve/CVE-2018-6922 FreeBSD is vulnerable to a denial of service, caused by the use of an inefficient TCP reassembly algorithm. By sending specially-crafted TCP traffic, a remote attacker could exploit this vulnerability to consume all...

There is a vulnerability in FreeBSD that affects AIX.,There is a vulnerability in FreeBSD that affects VIOS.

IBM SECURITY ADVISORY First Issued: Thu Nov 8 14:04:12 CST 2018 |Updated: Wed Dec 5 12:11:30 CST 2018 |Update: iFixes now provided for AIX 7200-03-02 and VIOS 2.2.6.32, 3.1.0.0, | and 3.1.0.10. The most recent version of this document is available here:...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect Rational Developer for i and Rational Developer for AIX and Linux - January 2018

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Versions 7 and 8 that are used by Rational Developer for i and Rational Developer for AIX and Linux. These issues were disclosed as part of the IBM Java SDK updates in October 2017 CVE-2017-10295, CVE-2017-10355,...

Xorg X11 Server Local Privilege Escalation

WARNING: Successful execution of this module results in /etc/passwd being overwritten. This module is a port of the OpenBSD X11 Xorg exploit to run on AIX. A permission check flaw exists for -modulepath and -logfile options when starting Xorg. This allows unprivileged users that can start the...

Security Bulletin: Vulnerability in OpenSSH affects AIX (CVE-2018-15473)

Summary Vulnerability in OpenSSH affects AIX. Vulnerability Details CVEID: CVE-2018-15473 DESCRIPTION: OpenSSH could allow a remote attacker to obtain sensitive information, caused by different responses to valid and invalid authentication attempts. By sending a specially crafted request, an...

Vulnerabilities in OpenSSH affect AIX.

IBM SECURITY ADVISORY First Issued: Wed Oct 24 11:28:50 CDT 2018 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/opensshadvisory12.asc https://aix.software.ibm.com/aix/efixes/security/opensshadvisory12.asc...

Security Bulletin: IBM has released updated AIX and VIOS fixes for CVE-2017-5715, known as Spectre, that are only applicable to some POWER9 systems.

Summary IBM has released updated AIX and VIOS fixes for CVE-2017-5715, known as Spectre, that are only applicable to the following POWER9 systems: 9040-MR9 9080-M9S The prtconf command may be used to find the system model number. For example: prtconf | grep "System Model" Vulnerability Details...

Security Bulletin: Vulnerabilities in GSKit affect IBM Spectrum Scale used by DB2® pureScale™ (CVE-2018-1431, CVE-2018-1447, CVE-2017-3732, CVE-2016-0705)

Summary DB2 LUW is affected by a vulnerability in IBM® Spectrum Scale Version V4.2 and V4.1 that is used by DB2® pureScale™ Feature on AIX and Linux. IBM Spectrum Scale is previously known as General Parallel File System GPFS. Vulnerability Details CVEID: CVE-2018-1431 DESCRIPTION: A vulnerabilit...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect AIX

Summary There are multiple vulnerabilities in IBM SDK Java Technology Edition, Versions 7, 7.1, 8 that are used by AIX. These issues were disclosed as part of the IBM Java SDK updates in July 2018. Vulnerability Details CVEID: CVE-2018-1517 DESCRIPTION: A flaw in the java.math component in IBM SD...

Vulnerability in OpenSSL affects AIX (CVE-2018-0732)

IBM SECURITY ADVISORY First Issued: Wed Sep 19 08:44:29 CDT 2018 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/openssladvisory28.asc https://aix.software.ibm.com/aix/efixes/security/openssladvisory28.asc...

Multiple vulnerabilities in IBM Java SDK affect AIX

IBM SECURITY ADVISORY First Issued: Wed Sep 19 08:42:00 CDT 2018 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/javajuly2018advisory.asc https://aix.software.ibm.com/aix/efixes/security/javajuly2018advisory.asc...

Online upgrade of Spectrum Scale security update packages for a Db2 pureScale cluster

Summary While the best practice for upgrading Spectrum Scale package level is through the Db2 fixpack, updating Spectrum Scale security update packages outlined in Db2 Security bulletins requires a manual installation procedure. This document contains instructions on how to apply Spectrum Scale...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect Rational Developer for i and Rational Developer for AIX and Linux

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Versions 7 and 8 that are used by Rational Developer for i and Rational Developer for AIX and Linux. These issues were disclosed as part of the IBM Java SDK updates in April 2018 CVE-2018-2783 and are included in the...

JDK: privilege escalation via insufficiently restricted access to Attach API

In Eclipse OpenJ9 version 0.8, users other than the process owner may be able to use Java Attach API to connect to an Eclipse OpenJ9 or IBM JVM on the same machine and use Attach API operations, which includes the ability to execute untrusted native code. Attach API is enabled by default on...

Security Bulletin: IBM® DB2® LUW on AIX and Linux Affected by vulnerabilities in zlib (CVE-2016-9840, CVE-2016-9841, CVE-2016-9842, CVE-2016-9843).

Summary IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server is affected by vulnerabilities in zlib. Vulnerability Details CVEID: CVE-2016-9840 DESCRIPTION: zlib is vulnerable to a denial of service, caused by an out-of-bounds pointer arithmetic in inftrees.c. By persuading a victim to...

Security Bulletin: IBM has released the following fixes for AIX and VIOS in response to Speculative Store Bypass (SSB), also known as Variant 4.

Summary IBM has released the following fixes for AIX and VIOS in response to CVE-2018-3639. Vulnerability Details CVEID: CVE-2018-3639 Affected Products and Versions AIX 5.3, 6.1, 7.1, 7.2 VIOS 2.2.x The vulnerabilities in the following filesets are being addressed: keyfileset = aix Fileset Lower...

IBM has released updated AIX and VIOS fixes for CVE-2017-5715 known as Spectre that are only applicable to some POWER9 systems.

IBM SECURITY ADVISORY First Issued: Fri Aug 17 08:05:01 CDT 2018 |Updated: Mon Sep 24 08:59:02 CDT 2018 |Update: Added system model 9080-M9S as a system to which the bulletin | applies. The most recent version of this document is available here:...

AIX bellmail Advisory : suid_advisory.asc (IV97356) (IV99497) (IV99498) (IV99499)

The version of bellmail installed on the remote AIX host is affected by a privilege escalation vulnerability. A local attacker can exploit this to gain root privileges. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid111969; scriptversion"1.4";...

AIX restbyinode Advisory : suid_advisory.asc (IV97852) (IV97957) (IV97958) (IV97959) (IV98013)

The version of restbyinode installed on the remote AIX host is affected by a privilege escalation vulnerability. A local attacker can exploit this to gain root privileges. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid111972; scriptversion"1.4";...