AIX (IJ54061)

The version of AIX installed on the remote host is prior to APAR IJ54061. It is, therefore, affected by a vulnerability as referenced in the IJ54061 advisory. - xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free. CVE-2022-49043 Note that Nessus has not tested for this...

CVE-2024-56346

IBM AIX 7.2 and 7.3 nimesis NIM master service could allow a remote attacker to execute arbitrary commands due to improper process controls...

AIX is affected by a denial of service due to Python (CVE-2024-0450)

IBM SECURITY ADVISORY First Issued: Mon Jun 24 15:07:51 CDT 2024 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/pythonadvisory10.asc Security Bulletin: AIX is affected by a denial of service due to Python CVE-2024-0450...

Security Bulletin: AIX is vulnerable to a machine-in-the-middle attack (CVE-2023-48795), arbitrary command execution (CVE-2023-51385), and information disclosure (CVE-2023-51384) due to OpenSSH

Summary Vulnerabilities in AIX's OpenSSH could allow a remote attacker to launch a machine-in-the-middle attack CVE-2023-48795 and execute arbitrary commands CVE-2023-51385, and could allow a local authenticated attacker to obtain sensitive information CVE-2023-51384. OpenSSH is used by AIX for...

AIX is vulnerable to denial of service due to zlib and zlibNX

IBM SECURITY ADVISORY First Issued: Tue Jul 25 11:05:17 CDT 2023 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/zlibadvisory2.asc Security Bulletin: AIX is vulnerable to denial of service due to zlib CVE-2022-37434...

AIX 7.1 TL 5 : bind (IJ40617)

https://vulners.com/cve/CVE-2021-25220 https://vulners.com/cve/CVE-2021-25220 ISC BIND could allow a remote attacker to bypass security restrictions, caused by an error when using DNS forwarders. An attacker could exploit this vulnerability to poison the cache with incorrect records leading to...

AIX (IJ41706)

The version of AIX installed on the remote host is prior to APAR IJ41706. It is, therefore, affected by a vulnerability as referenced in the IJ41706 advisory. - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to obtain root...

AIX (IJ41687)

The version of AIX installed on the remote host is prior to APAR IJ41687. It is, therefore, affected by a vulnerability as referenced in the IJ41687 advisory. - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to obtain root...

CVE-2022-43382 IBM AIX denial of service

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a local user with elevated privileges to exploit a vulnerability in the lpd daemon to cause a denial of service. IBM X-Force ID: 238641...

AIX (IJ44552)

The version of AIX installed on the remote host is prior to APAR IJ44552. It is, therefore, affected by a vulnerability as referenced in the IJ44552 advisory. - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a local user with elevated privileges to exploit a vulnerability in the lpd daemon to cau...

AIX (IJ42163)

The version of AIX installed on the remote host is prior to APAR IJ42163. It is, therefore, affected by a vulnerability as referenced in the IJ42163 advisory. - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the rmrlcachefile command to...

AIX is affected by arbitrary code execution and denial of service due to Python

IBM SECURITY ADVISORY First Issued: Tue Nov 1 10:11:15 CDT 2022 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/pythonadvisory2.asc https://aix.software.ibm.com/aix/efixes/security/pythonadvisory2.asc...

AIX 7.2 TL 5 : libxml2 (IJ42339)

https://vulners.com/cve/CVE-2022-29824 https://vulners.com/cve/CVE-2022-29824 GNOME libxml2 is vulnerable to a denial of service, caused by an integer overflows in several buffer handling functions in buf.c xmlBuf and tree.c xmlBuffer. By persuading a victim to open a specially-crafted XML file, ...

AIX (IJ36593)

The version of AIX installed on the remote host is prior to APAR IJ36593. It is, therefore, affected by a vulnerability as referenced in the IJ36593 advisory. - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged trusted host user to exploit a vulnerability in the nimsh daemon to cau...

AIX (IJ37503)

The version of AIX installed on the remote host is prior to APAR IJ37503. It is, therefore, affected by a vulnerability as referenced in the IJ37503 advisory. - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to cause a deni...

AIX (IJ37222)

The version of AIX installed on the remote host is prior to APAR IJ37222. It is, therefore, affected by a vulnerability as referenced in the IJ37222 advisory. - In BIND 9.3.0 - 9.11.35, 9.12.0 - 9.16.21, and versions 9.9.3-S1 - 9.11.35-S1 and 9.16.8-S1 - 9.16.21-S1 of BIND Supported Preview...

AIX (IJ34512)

The version of AIX installed on the remote host is prior to APAR IJ34512. It is, therefore, affected by a vulnerability as referenced in the IJ34512 advisory. - IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the libc.a library to expose...

AIX 7.1 TL 5 : lpd (IJ30372)

https://vulners.com/cve/CVE-2021-29693 https://vulners.com/cve/CVE-2021-29693 IBM AIX could allow a local user with elevated privileges to exploit a vulnerability in the lpd daemon. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security...

AIX 7.2 TL 3 : gencore (IJ28826)

https://vulners.com/cve/CVE-2020-4887 https://vulners.com/cve/CVE-2020-4887 The AIX gencore user command may be exploited to create arbitrary files in any directory. C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory gencoreadvisory.asc...

AIX 7.1 TL 5 : bind (IJ29230)

https://vulners.com/cve/CVE-2020-8622 https://vulners.com/cve/CVE-2020-8622 ISC BIND is vulnerable to a denial of service, caused by an assertion failure when attempting to verify a truncated response to a TSIG-signed request. By sending a specially-crafted request, a remote authenticated attacke...