Security Bulletin: Vulnerability in EFS affects AIX (CVE-2021-29861)

Summary UPDATED Mar 17 Corrected the affected upper fileset levels for AIX 7.1 TL5 to show that SP11 is affected. Added iFix for 7.1 TL5 SP11 There is a vulnerability in EFS that affects AIX. Vulnerability Details CVEID:CVE-2021-29861 DESCRIPTION: IBM AIX could allow a non-privileged local user t...

Security Bulletin: Vulnerability in libc affects AIX (CVE-2021-29860)

Summary UPDATED Mar 17 Corrected the affected upper fileset levels for AIX 7.1 TL5 to show that SP11 is affected. Added iFix for 7.1 TL5 SP11 There is a vulnerability in the libc.a library that affects AIX. Vulnerability Details CVEID:CVE-2021-29860 DESCRIPTION: IBM AIX could allow a non-privileg...

Security Bulletin: AIX is vulnerable to a denial of service due to lpd (CVE-2022-43382)

Summary UPDATED Mar 17 Corrected the affected upper fileset levels for AIX 7.1 TL5 to show that SP11 is affected. Corrected the affected upper fileset levels for AIX 7.3 TL0 to show that SP03 is affected. Added iFixes for 7.1 TL5 SP10 and 7.3 TL0 SP03. A vulnerability in the AIX lpd printer daemo...

AIX is vulnerable to a buffer overflow due to X11

IBM SECURITY ADVISORY First Issued: Tue Jan 17 09:54:47 CST 2023 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/x11advisory.asc Security Bulletin: AIX is vulnerable to a buffer overflow due to X11 CVE-2022-47990...

AIX is vulnerable to a denial of service due to libxml2 (CVE-2022-29824)

IBM SECURITY ADVISORY First Issued: Mon Sep 12 15:07:01 CDT 2022 |Updated: Mon Dec 12 12:49:47 CST 2022 |Update: Added iFixes for AIX 7.2 TL5 SP5 and VIOS 3.1.4.10. The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/libxml2advisory3.asc...

IBM PowerVM VIOS could allow a remote attacker to tamper with system configuration or cause a denial of service

IBM SECURITY ADVISORY First Issued: Thu Jul 28 13:39:29 CDT 2022 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/viosadvisory.asc https://aix.software.ibm.com/aix/efixes/security/viosadvisory.asc...

AIX is vulnerable to cache poisoning due to ISC BIND

IBM SECURITY ADVISORY First Issued: Thu Jul 28 13:24:22 CDT 2022 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/bindadvisory21.asc https://aix.software.ibm.com/aix/efixes/security/bindadvisory21.asc...

Security Bulletin: Vulnerability in mount affects AIX (CVE-2021-38990)

Summary There is a vulnerability in the mount command that affects AIX. Vulnerability Details CVEID:CVE-2021-38990 DESCRIPTION: IBM AIX could allow a non-privileged local user to exploit a vulnerability in the mount command which could lead to code execution. CVSS Base score: 8.4 CVSS Temporal...

Security Bulletin: Vulnerability in BIND affects AIX (CVE-2021-25219)

Summary UPDATED Mar 16 See Change History - New iFixes Provided: There is a vulnerability in BIND that affects AIX. Vulnerability Details CVEID: CVE-2021-25219 DESCRIPTION: ISC BIND is vulnerable to a denial of service, caused by a flaw in response processing. By abusing a lame cache, an attacker...

Security Bulletin: Vulnerability in the AIX kernel (CVE-2021-38988)

Summary There is a vulnerability in the AIX pfcdd kernel extension. Vulnerability Details CVEID: CVE-2021-38988 DESCRIPTION: IBM AIX could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to cause a denial of service. CVSS Base score: 6.2 CVSS Temporal Score: See:...

Security Bulletin: Vulnerabilities in AIX CAA (CVE-2022-22350, CVE-2021-38996)

Summary There are multiple vulnerabilities in AIX CAA. Vulnerability Details CVEID: CVE-2022-22350 DESCRIPTION: IBM AIX could allow a non-privileged local user to exploit a vulnerability in CAA to cause a denial of service. CVSS Base score: 6.2 CVSS Temporal Score: See:...

Vulnerabilities in AIX CAA

IBM SECURITY ADVISORY First Issued: Tue Mar 1 09:31:15 CST 2022 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/caaadvisory2.asc https://aix.software.ibm.com/aix/efixes/security/caaadvisory2.asc...

Vulnerabilities in the AIX kernel

IBM SECURITY ADVISORY First Issued: Wed Feb 23 13:03:11 CST 2022 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/kerneladvisory3.asc https://aix.software.ibm.com/aix/efixes/security/kerneladvisory3.asc...

Security Bulletin: Vulnerability in lscore affects AIX (CVE-2021-38991)

Summary There is a vulnerability in the lscore command that affects AIX. Vulnerability Details CVEID: CVE-2021-38991 DESCRIPTION: IBM AIX could allow a non-privileged local user to exploit a vulnerability in the lscore command which could lead to code execution. CVSS Base score: 8.4 CVSS Temporal...

There is a vulnerability in the lscore command that affects AIX.,There is a vulnerability in the lscore command that affects VIOS.

IBM SECURITY ADVISORY First Issued: Mon Jan 10 13:18:02 CST 2022 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/lscoreadvisory.asc https://aix.software.ibm.com/aix/efixes/security/lscoreadvisory.asc...

Vulnerability in libc affects AIX

IBM SECURITY ADVISORY First Issued: Tue Nov 16 13:38:36 CST 2021 |Updated: Fri Mar 17 15:26:09 CDT 2023 |Update: Corrected the affected upper fileset levels for AIX 7.1 TL5 | to show that SP11 is affected. Added iFix for 7.1 TL5 SP11. The most recent version of this document is available here:...

Security Bulletin: Vulnerability in ksh affects AIX (CVE-2021-29741)

Summary There is a vulnerability in Korn Shell ksh that affects AIX. Vulnerability Details CVEID: CVE-2021-29741 DESCRIPTION: IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a local user to exploit a vulnerability in Korn Shell ksh to gain root privileges. IBM X-Force ID: 201478. CVSS Base score: 8.4...

Security Bulletin: Vulnerability in sendmail impacts AIX (CVE-2014-3956)

Summary There is a vulnerability in sendmail that impacts AIX. Vulnerability Details CVEID: CVE-2014-3956 DESCRIPTION: The smcloseonexec function in conf.c in sendmail before 8.14.9 has arguments in the wrong order, and consequently skips setting expected FDCLOEXEC flags, which allows local users...

Security Bulletin: IBM has released AIX and VIOS iFixes in response to the vulnerabilities known as Spectre and Meltdown.

Summary IBM has released the following fixes for AIX and VIOS in response to CVE-2017-5715, CVE-2017-5753, and CVE-2017-5754. Vulnerability Details CVEID: CVE-2017-5715 CVEID: CVE-2017-5753 CVEID: CVE-2017-5754 iFixes released on August 17, 2018: Updated AIX and VIOS fixes for CVE-2017-5715, know...

Security Bulletin: Vulnerability in the AIX trace facility (CVE-2021-29706)

Summary There is a vulnerability in the AIX trace facility. Vulnerability Details CVEID: CVE-2021-29706 DESCRIPTION: IBM AIX could allow a non-privileged local user to exploit a vulnerability in the trace facility to expose sensitive information or cause a denial of service. CVSS Base score: 6.8...