CVE-2005-0991

RC.BOOT in IBM AIX 5.1, 5.2, and 5.3 does not "use a secure location for temporary files," which allows local users to have an unknown impact, probably by overwriting files...

CVE-2002-1689

Unknown vulnerability in the login program on AIX before 4.0 could allow remote users to specify 100 or more environment variables when logging on, which exceeds the length of a certain string, possibly triggering a buffer overflow...

CVE-2002-1690

Unknown vulnerability in AIX before 4.0 with unknown attack vectors and unknown impact, aka "security issue," as fixed by APAR IY28225...

CVE-2002-1687

Buffer overflow in the diagnostics library in AIX allows local users to "cause data and instructions to be overwritten" via a long DIAGNOSTICS environment variable...

CVE-2001-1529

Buffer overflow in rpc.yppasswdd yppasswd server in AIX allows attackers to gain unauthorized access via a long string. NOTE: due to lack of details in the vendor advisory, it is not clear if this is the same issue as CVE-2001-0779...

CVE-2009-0779

Buffer overflow in pppdial in IBM AIX 5.3 and 6.1 allows local users to gain privileges via a long "input string."...

CVE-2002-1686

Buffer overflow in lscfg of unknown versions of AIX has unknown impact...

CVE-1999-0694

Denial of service in AIX ptrace system call allows local users to crash the system...

CVE-1999-1589

Unspecified vulnerability in crontab in IBM AIX 3.2 allows local users to gain root privileges via unknown attack vectors...

CVE-1999-0803

The fwluser script in AIX eNetwork Firewall allows local users to write to arbitrary files via a symlink attack...

CVE-1999-0112

Buffer overflow in AIX dtterm program for the CDE...

CVE-1999-0092

Various vulnerabilities in the AIX portmir command allows local users to obtain root access...

CVE-1999-0087

Denial of service in AIX telnet can freeze a system and prevent users from accessing the server...

CVE-1999-0093

AIX nslookup command allows local users to obtain root access by not dropping privileges correctly...

Security Bulletin: AIX/VIOS is vulnerable to a denial of service due to ISC BIND

Summary Vulnerabilities in ISC BIND could allow a remote attacker to cause a denial of service CVE-2024-12705, CVE-2024-11187. AIX uses ISC BIND as as part of its DNS functions. Vulnerability Details CVEID:CVE-2024-12705 DESCRIPTION: Clients using DNS-over-HTTPS DoH can exhaust a DNS resolver's C...

AIX is affected by a denial of service (CVE-2024-8176) due to Python

IBM SECURITY ADVISORY First Issued: Tue May 20 08:31:27 CDT 2025 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/pythonadvisory15.asc Security Bulletin: AIX is affected by a denial of service CVE-2024-8176 due to Python...

AIX is vulnerable to a denial of service due to ISC BIND

IBM SECURITY ADVISORY First Issued: Tue May 20 08:16:08 CDT 2025 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/bindadvisory28.asc Security Bulletin: AIX is vulnerable to a denial of service due to ISC BIND...

Security Bulletin: AIX is vulnerable to a denial of service due to libxml2 (CVE-2022-49043)

Summary UPDATED May 5 2025 New iFixes provided for AIX 7.2 TL5 SP7, 7.3 TL1 SP2 and SP3, 7.3 TL2 SP1, and VIOS 3.1.4.31. The new iFixes include a packaging change to clarify that the iFixes are cumulative and address relevant, previously issued AIX/VIOS libxml2 security bulletins. There is no...

Security Bulletin: IBM Common Cryptographic Architecture (CCA) is vulnerable to denial of service (CVE-2022-22423)

Summary Insufficient input validation in IBM Common Cryptographic Architecture CCA may affect Hardware Security Module HSM availability. An affected IBM 4767 or IBM 4769 HSM may be forced into a check-stop condition by specially-crafted requests from HSM users. Recovery from a check-stop conditio...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect AIX

Summary There are multiple vulnerabilities in IBM SDK Java Technology Edition, Version 8 used by AIX. AIX has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2024-21217 DESCRIPTION: Vulnerability in Java SE component: Serialization. Difficult to exploit vulnerability allows...