PT-2022-26880 · Ibm · Vios +1

Name of the Vulnerable Software and Affected Versions: IBM AIX versions 7.1 through 7.3 VIOS version 3.1 Description: The issue allows a local user with elevated privileges to exploit a vulnerability in the lpd daemon, causing a denial of service. Recommendations: For IBM AIX versions 7.1 through...

AIX : Multiple Vulnerabilities (IJ42938)

The version of AIX installed on the remote host is prior to APAR IJ42938. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ42938 advisory. - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX NFS kernel...

AIX : Multiple Vulnerabilities (IJ43072)

The version of AIX installed on the remote host is prior to APAR IJ43072. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ43072 advisory. - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX NFS kernel...

AIX : Multiple Vulnerabilities (IJ44595)

The version of AIX installed on the remote host is prior to APAR IJ44595. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ44595 advisory. - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX NFS kernel...

AIX : Multiple Vulnerabilities (IJ43099)

The version of AIX installed on the remote host is prior to APAR IJ43099. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ43099 advisory. - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX NFS kernel...

AIX 7.2 TL 5 : kernel (IJ44115)

https://vulners.com/cve/CVE-2022-39164 https://vulners.com/cve/CVE-2022-39164 IBM AIX could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to obtain root privileges. IBM AIX could allow a non-privileged local user to exploit a vulnerability in the AIX NFS kernel...

AIX : Multiple Vulnerabilities (IJ42937)

The version of AIX installed on the remote host is prior to APAR IJ42937. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ42937 advisory. - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX NFS kernel...

AIX 7.2 TL 5 : kernel (IJ44114)

https://vulners.com/cve/CVE-2022-39164 https://vulners.com/cve/CVE-2022-39164 IBM AIX could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to obtain root privileges. IBM AIX could allow a non-privileged local user to exploit a vulnerability in the AIX NFS kernel...

AIX : Multiple Vulnerabilities (IJ43098)

The version of AIX installed on the remote host is prior to APAR IJ43098. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ43098 advisory. - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX NFS kernel...

AIX : Multiple Vulnerabilities (IJ41975)

The version of AIX installed on the remote host is prior to APAR IJ41975. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ41975 advisory. - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX NFS kernel...

AIX : Multiple Vulnerabilities (IJ43967)

The version of AIX installed on the remote host is prior to APAR IJ43967. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ43967 advisory. - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX NFS kernel...

AIX : Multiple Vulnerabilities (IJ43468)

The version of AIX installed on the remote host is prior to APAR IJ43468. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ43468 advisory. - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX NFS kernel...

AIX : Multiple Vulnerabilities (IJ44594)

The version of AIX installed on the remote host is prior to APAR IJ44594. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ44594 advisory. - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX NFS kernel...

[SECURITY] [DLA 3239-2] git regression update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3239-2 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler December 14, 2022 https://wiki.debian.org/LTS -...

PT-2022-24787 · Ibm · Vios +1

Name of the Vulnerable Software and Affected Versions: IBM AIX versions 7.1 through 7.3 VIOS version 3.1 Description: The issue allows a non-privileged local user to exploit a vulnerability in the CAA or the AIX pfcdd kernel extension to cause a denial of service. Recommendations: For IBM AIX...

PT-2022-24786 · Ibm · Aix +2

Name of the Vulnerable Software and Affected Versions: IBM AIX versions 7.1 through 7.3 VIOS version 3.1 Description: The issue allows a non-privileged local user to exploit a vulnerability in the AIX kernel to cause a denial of service. This can be achieved by exploiting the vulnerability in the...

kernel: openvswitch: integer underflow leads to out-of-bounds write in reserve_sfa_size()

An integer coercion error was found in the openvswitch kernel module. Given a sufficiently large number of actions, while copying and reserving memory for a new action of a new flow, the reservesfasize function does not return -EMSGSIZE as expected, potentially leading to an out-of-bounds write...

kernel: openvswitch: integer underflow leads to out-of-bounds write in reserve_sfa_size()

An integer coercion error was found in the openvswitch kernel module. Given a sufficiently large number of actions, while copying and reserving memory for a new action of a new flow, the reservesfasize function does not return -EMSGSIZE as expected, potentially leading to an out-of-bounds write...

kernel: openvswitch: integer underflow leads to out-of-bounds write in reserve_sfa_size()

An integer coercion error was found in the openvswitch kernel module. Given a sufficiently large number of actions, while copying and reserving memory for a new action of a new flow, the reservesfasize function does not return -EMSGSIZE as expected, potentially leading to an out-of-bounds write...

Microsoft Windows Sysinternals Sysmon < 14.13 Elevation of Privilege (November 2022)

An elevation of privilege vulnerability exists in Microsoft Windows Sysinternals Sysmon prior to 14.13. A locally authenticated attacker who successfully exploited the vulnerability could manipulate information on the Sysinternals services to achieve elevation from local user to SYSTEM admin. Not...