There are multiple vulnerabilities in NTPv3 and NTPv4 that impact AIX.

IBM SECURITY ADVISORY First Issued: Mon Feb 13 15:32:47 CST 2017 |Updated: Mon Oct 2 10:47:12 CDT 2017 |Update 2: Removed bos.net.tcp.ntp from the impacted fileset list for | AIX 7200-01-02. Fileset bos.net.tcp.ntpd is still listed as impacted | for AIX 7200-01-02. The most recent version of this...

IBM AIX Local Elevation of Privilege Vulnerability (CNVD-2017-01334)

IBM AIX Advanced Interactive eXecutive is a UNIX operating system developed by IBM. A local elevation of privilege vulnerability exists in bellmail in IBM AIX versions 6.1, 7.1, and 7.2. A local attacker can exploit this vulnerability to gain root privileges...

AIX Java Advisory : java_oct2016_advisory.asc (October 2016 CPU)

The version of Java SDK installed on the remote AIX host is affected by multiple vulnerabilities in the following subcomponents : - An unspecified flaw exists in the Libraries subcomponent that allows an unauthenticated, remote attacker to impact integrity. CVE-2016-5542 - An unspecified flaw...

Vulnerabilities in OpenSSH affect AIX.

IBM SECURITY ADVISORY First Issued:Sun Feb 5 23:36:10 CST 2017 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/opensshadvisory10.asc https://aix.software.ibm.com/aix/efixes/security/opensshadvisory10.asc...

Code injection

IBM AIX 6.1, 7.1, and 7.2 could allow a local user to exploit a vulnerability in the bellmail binary to gain root privileges...

CVE-2017-1093

IBM AIX 6.1, 7.1, and 7.2 could allow a local user to exploit a vulnerability in the bellmail binary to gain root privileges...

CVE-2017-1093

IBM AIX 6.1, 7.1, and 7.2 could allow a local user to exploit a vulnerability in the bellmail binary to gain root privileges...

CVE-2017-1093

The CVE-2017-1093 issue affects IBM AIX 6.1, 7.1, and 7.2 where a local attacker could exploit a vulnerability in the bellmail binary to gain root privileges. Connected sources corroborate a local-privilege-escalation in bellmail and tie affected TLs/versions to AIX. The Nessus advisories link th...

CVE-2017-1093

IBM AIX 6.1, 7.1, and 7.2 could allow a local user to exploit a vulnerability in the bellmail binary to gain root privileges...

CVE-2016-5985

The IBM Tivoli Storage Manager IBM Spectrum Protect AIX client is vulnerable to a buffer overflow when Journal-Based Backup is enabled. A local attacker could overflow a buffer and execute arbitrary code on the system or cause a system crash...

CVE-2016-5985

The IBM Tivoli Storage Manager IBM Spectrum Protect AIX client is vulnerable to a buffer overflow when Journal-Based Backup is enabled. A local attacker could overflow a buffer and execute arbitrary code on the system or cause a system crash...

Buffer overflow

The IBM Tivoli Storage Manager IBM Spectrum Protect AIX client is vulnerable to a buffer overflow when Journal-Based Backup is enabled. A local attacker could overflow a buffer and execute arbitrary code on the system or cause a system crash...

Design/Logic Flaw

IBM AIX contains an unspecified vulnerability that would allow a locally authenticated user to obtain root level privileges...

CVE-2016-3053

IBM AIX contains an unspecified vulnerability that would allow a locally authenticated user to obtain root level privileges...

CVE-2016-3053

The CVE-2016-3053 issue affects IBM AIX (AIX 6.1/7.1/7.2.0.2) via the lsmcode component, where a vulnerability in lsmcode can allow a locally authenticated user to gain root privileges. Public material shows a local privilege escalation path demonstrated by exploits (e.g., AIX lsmcode exploit in ...

CVE-2016-5985

The IBM Tivoli Storage Manager IBM Spectrum Protect AIX client is vulnerable to a buffer overflow when Journal-Based Backup is enabled. A local attacker could overflow a buffer and execute arbitrary code on the system or cause a system crash...

CVE-2016-5985

CVE-2016-5985 : The IBM Tivoli Storage Manager (IBM Spectrum Protect) AIX client is vulnerable to a buffer overflow when Journal-Based Backup is enabled, allowing a local attacker to execute arbitrary code or cause a system crash. Affected on AIX: 7.1.0.0–7.1.6.2; 6.4.0.0–6.4.3.3; 6.3.0.0–6.3.2.5...

CVE-2016-3053

IBM AIX contains an unspecified vulnerability that would allow a locally authenticated user to obtain root level privileges...

AIX 7.2 TL 0 : sysproc (IV91456)

https://vulners.com/cve/CVE-2016-8944 https://vulners.com/cve/CVE-2016-8944 IBM AIX allows a local user to open a file with a specially crafted argument that would crash the system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security...

AIX 7.2 TL 1 : sysproc (IV90234)

https://vulners.com/cve/CVE-2016-8944 https://vulners.com/cve/CVE-2016-8944 IBM AIX allows a local user to open a file with a specially crafted argument that would crash the system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security...