EUVD-2023-49474

Malicious code in bioql PyPI...

CVE-2025-36244

IBM AIX 7.2, 7.3, IBM VIOS 3.1, and 4.1, when configured to use Kerberos network authentication, could allow a local user to write to files on the system with root privileges due to improper initialization of critical variables...

CVE-2025-36244

IBM AIX 7.2, 7.3, IBM VIOS 3.1, and 4.1, when configured to use Kerberos network authentication, could allow a local user to write to files on the system with root privileges due to improper initialization of critical variables...

CVE-2025-36244 IBM AIX privilege escalation

IBM AIX 7.2, 7.3, IBM VIOS 3.1, and 4.1, when configured to use Kerberos network authentication, could allow a local user to write to files on the system with root privileges due to improper initialization of critical variables...

CVE-2025-36244 IBM AIX privilege escalation

IBM AIX 7.2, 7.3, IBM VIOS 3.1, and 4.1, when configured to use Kerberos network authentication, could allow a local user to write to files on the system with root privileges due to improper initialization of critical variables...

AIX/VIOS is vulnerable to a race condition in directory handling due to Perl (CVE-2025-40909)

IBM SECURITY ADVISORY First Issued: Tue Sep 16 08:25:08 CDT 2025 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/perladvisory11.asc Security Bulletin: AIX is vulnerable to a race condition in directory handling due to Perl CVE-2025-4090...

AIX/VIOS is vulnerable to arbitrary file write due to Kerberos (CVE-2025-36244)

IBM SECURITY ADVISORY First Issued: Tue Sep 16 08:16:52 CDT 2025 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/nasadvisory4.asc Security Bulletin: AIX is vulnerable to arbitrary file write due to Kerberos CVE-2025-36244...

IBM AIX和IBM VIOS 安全漏洞

IBM AIX and IBM VIOS are both products of the International Business Machines IBM Corporation.IBM AIX is an open standards-based UNIX operating system developed for the IBM Power architecture.IBM VIOS is part of the PowerVm® Editions hardware feature. IBM VIOS is part of the PowerVm® Editions...

PT-2025-37994

Name of the Vulnerable Software and Affected Versions: IBM AIX versions 7.2 through 7.3 IBM VIOS versions 3.1 through 4.1 Description: IBM AIX and VIOS, when configured to use Kerberos network authentication, may allow a local user to gain root privileges by writing to files on the system due to...

How to Configure NFSv4 on IBM AIX

Purpose This article documents steps to enable NFSv4 on IBM AIX to enable backup mount support for Veeam Agent for IBM AIX introduced with Veeam Backup & Replication 13. Solution Part 1: Configure the Host Resolution 1. Open the /etc/netsvc.conf file. 2. Ensure that the hosts parameter is set to...

Linux Distros Unpatched Vulnerability : CVE-2019-17041

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Rsyslog v8.1908.0. contrib/pmaixforwardedfrom/pmaixforwardedfrom.c has a heap overflow in the parser for AIX log messages. The parser...

Security Bulletin: IBM Spectrum Protect Server may not count invalid sign-on attempts from Operations Center (CVE-2022-22485)

Summary The IBM Spectrum Protect Server, in certain instances, may not increment the number of invalid sign-on attempts from Operations Center. This could allow an attacker to use brute force techniques to gain access to the IBM Spectrum Protect Server. Vulnerability Details CVEID:CVE-2022-22485...

Security Bulletin: IBM Virtualization Engine TS7700 is susceptible to Tampering and Elevation of Privilege due to the use of AIX NIM

Summary The use of AIX NIM exposes IBM Virtualization Engine TS7700 to vulnerabilities identified as CVE-2024-56346 and CVE-2024-56347, making it susceptible to tampering and privilege escalation attacks. These weaknesses in AIX could be exploited by a remote attacker to execute unauthorized...

Security Bulletin: AIX/VIOS is vulnerable to arbitrary code execution (CVE-2025-3277, CVE-2025-29087) and denial of service (CVE-2025-29088) due to RPM

Summary Vulnerabilities in RPM could allow an attacker to execute arbitrary code CVE-2025-3277, CVE-2025-29087 or cause a denial of service CVE-2025-29088. RPM is used by AIX for package management. Vulnerability Details CVEID:CVE-2025-3277 DESCRIPTION: An integer overflow can be triggered in...

Security Bulletin: Multiple vulnerabilities in libxml2 affect AIX/VIOS

Summary Vulnerabilities in libxml2 could cause a denial of service or other possible undefined behavior CVE-2025-49796, CVE-2025-49794, CVE-2025-49795, CVE-2025-6021. AIX uses libxml2 as part of its XML parsing functions. Vulnerability Details CVEID:CVE-2025-49796 DESCRIPTION: A vulnerability was...

Multiple vulnerabilities in libxml2 affect AIX

IBM SECURITY ADVISORY First Issued: Thu Jul 17 09:41:13 CDT 2025 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/libxml2advisory9.asc Security Bulletin: Multiple vulnerabilities in libxml2 affect AIX...

AIX is vulnerable to arbitrary code execution (CVE-2025-3277 CVE-2025-29087) and denial of service (CVE-2025-29088) due to RPM

IBM SECURITY ADVISORY First Issued: Thu Jul 17 09:32:10 CDT 2025 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/rpmadvisory3.asc Security Bulletin: AIX is vulnerable to arbitrary code execution CVE-2025-3277, CVE-2025-29087 and denial ...

AIX : Multiple Vulnerabilities (IJ55266)

The version of AIX installed on the remote host is prior to APAR IJ55266. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ55266 advisory. - A vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can trigger a memory...

AIX : Multiple Vulnerabilities (IJ55267)

The version of AIX installed on the remote host is prior to APAR IJ55267. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ55267 advisory. - A vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can trigger a memory...

AIX : Multiple Vulnerabilities (IJ55268)

The version of AIX installed on the remote host is prior to APAR IJ55268. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ55268 advisory. - A vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can trigger a memory...