15515 matches found
AIX is vulnerable to arbitrary command execution due to Perl (CVE-2024-25021 CVE-2023-47038 CVE-2023-47100)
IBM SECURITY ADVISORY First Issued: Wed Feb 21 15:59:59 CST 2024 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/perladvisory8.asc Security Bulletin: AIX is vulnerable to arbitrary command execution due to Perl CVE-2024-25021,...
PT-2024-20704 · Ibm · Vios +1
Name of the Vulnerable Software and Affected Versions: IBM AIX version 7.3 VIOS version 4.1 Description: The issue allows a non-privileged local user to execute arbitrary commands due to a vulnerability in the Perl implementation. A remote attacker could bypass security restrictions by exploiting...
Security Bulletin: There is a vulnerability in IBM Semeru Runtime that is shipped with CICS Transaction Gateway for Multiplatforms (CVE-2023-21968).
Summary There is a vulnerability in IBM Semeru Runtime that is shipped with CICS Transaction Gateway for Multiplatforms CVE-2023-21968. An update to CICS Transaction Gateway for Multiplatforms has been released to address this vulnerability. Vulnerability Details CVEID:CVE-2023-21968 DESCRIPTION:...
Security Bulletin: AIX is vulnerable to a denial of service (CVE-2023-5678, CVE-2023-6129, CVE-2023-6237) and an attacker may obtain sensitive information (CVE-2023-5363) due to OpenSSL
Summary Vulnerabilities in OpenSSL could allow a remote attacker to cause a denial of service CVE-2023-5678, CVE-2023-6129, CVE-2023-6237 or obtain sensitive information CVE-2023-5363. OpenSSL is used by AIX as part of AIX's secure network communications. Vulnerability Details CVEID:CVE-2023-5363...
AIX is vulnerable to a denial of service (CVE-2023-5678 CVE-2023-6129 CVE-2023-6237) and an attacker may obtain sensitive information (CVE-2023-5363) due to OpenSSL
IBM SECURITY ADVISORY First Issued: Thu Jan 25 14:11:09 CST 2024 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/openssladvisory40.asc Security Bulletin: AIX is vulnerable to a denial of service CVE-2023-5678, CVE-2023-6129, CVE-2023-62...
The vulnerability of the AIX operating system, related to deficiencies in access control, allows attackers to escalate their privileges or cause service failures.
The vulnerability of the AIX operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges or cause service interruptions using the qdaemon command...
The vulnerability of the AIX operating system, related to insufficient validation of input data, allows attackers to escalate their privileges or cause service failures.
The vulnerability of the AIX operating system is related to insufficient checking of input data. Exploiting this vulnerability can allow an attacker to increase their privileges or cause service interruptions...
The vulnerability of the AIX operating system’s kernel, which allows a hacker to trigger a service failure
The vulnerability of the AIX operating system’s kernel is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability of the AIX operating system’s SMB client allows a hacker to trigger a service failure.
The vulnerability of the SMB operating system AIX client is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability of the kernel of the AIX operating system allows a hacker to cause a service failure.
The vulnerability of the kernel of the AIX operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the AIX operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the AIX operating system’s kernel is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability of the AIX operating system, related to insufficient validation of input data, allows attackers to escalate their privileges.
The vulnerability of the AIX operating system is related to insufficient checking of input data. Exploiting this vulnerability can allow an attacker to enhance their privileges using the piodmgrsu command...
Security Bulletin: AIX is vulnerable to cache poisoning due to ISC BIND (CVE-2021-25220)
Summary A vulnerability in ISC BIND could allow a remote attacker to poison the cache CVE-2021-25220. AIX uses ISC BIND as part of its DNS functions. Vulnerability Details CVEID:CVE-2021-25220 DESCRIPTION: ISC BIND could allow a remote attacker to bypass security restrictions, caused by an error...
Security Bulletin: AIX is vulnerable to denial of service due to ISC BIND (CVE-2022-38178, CVE-2022-3080, CVE-2022-38177, CVE-2022-2795)
Summary UPDATED May 17 Corrected the affected fileset levels for AIX 7.2 TL5 and removed bos.net.tcp.bind 7.2.5.200.: A vulnerability in ISC BIND could allow a remote attacker to cause a denial of service CVE-2022-38178, CVE-2022-3080, CVE-2022-38177, CVE-2022-2795. AIX uses ISC BIND as part of i...
IBM AIX and IBM VIOS Input Validation Error Vulnerability
IBM AIX and IBM Vios are both products of the International Business Machines IBM Corporation.IBM AIX is an open-standards-based UNIX operating system developed for the IBM Power architecture.IBM Vios is part of the PowerVm® Editions hardware feature. Helps to share physical I/O resources between...
Security Bulletin: CVE-2023-21830 and CVE-2023-21843 may affect IBM® SDK, Java™ Technology Edition shipped with IBM TXSeries for Multiplatforms
Summary CVE-2023-21830 and CVE-2023-21843 may affect IBM® SDK, Java™ Technology Edition shipped with IBM TXSeries for Multiplatforms. IBM TXSeries for Multiplatforms has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2023-21830 DESCRIPTION: An unspecified vulnerability in Java SE...
CVE-2023-45171
IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the kernel to cause a denial of service. IBM X-Force ID: 267969...
CVE-2023-45171
IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the kernel to cause a denial of service. IBM X-Force ID: 267969...