There are multiple vulnerabilities in the AIX kernel,There are multiple vulnerabilities in the AIX kernel for VIOS

IBM SECURITY ADVISORY First Issued: Wed Aug 25 14:58:13 CDT 2021 |Update 2: Wed Sep 1 16:11:34 CDT 2021 |Update: Additional iFixes are now available. | Additional iFixes are now available for: | AIX 7100-05-06 and 7100-05-07 | AIX 7200-03-05 and 7200-03-06 | AIX 7200-04-02 and 7200-04-03 | AIX...

There is a vulnerability in Korn Shell (ksh) that affects AIX,There is a vulnerability in Korn Shell (ksh) that affects VIOS

IBM SECURITY ADVISORY First Issued: Fri Jul 30 14:43:36 CDT 2021 |Updated: Wed Aug 11 14:52:54 CDT 2021 |Update: Corrected the AIX 7.1 TL5 affected fileset levels. The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/kshadvisory.asc...

There is a vulnerability in BIND that affects AIX.,There is a vulnerability in BIND that affects VIOS.

IBM SECURITY ADVISORY First Issued: Thu Jul 29 15:13:19 CDT 2021 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/bindadvisory19.asc https://aix.software.ibm.com/aix/efixes/security/bindadvisory19.asc...

There is a vulnerability in the lpd daemon that affects AIX.,There is a vulnerability in the lpd daemon that affects VIOS.

IBM SECURITY ADVISORY First Issued: Fri Jun 25 09:22:44 CDT 2021 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/lpdadvisory.asc https://aix.software.ibm.com/aix/efixes/security/lpdadvisory.asc...

There is a vulnerability in the AIX trace facility.

IBM SECURITY ADVISORY First Issued: Tue Jun 15 19:09:20 CDT 2021 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/traceadvisory.asc https://aix.software.ibm.com/aix/efixes/security/traceadvisory.asc...

Security Bulletin: IBM MQ Appliance is affected by a Java SE vulnerability (CVE-2020-27221)

Summary IBM MQ Appliance has resolved a Java SE vulnerability. Vulnerability Details CVEID: CVE-2020-27221 DESCRIPTION: Eclipse OpenJ9 is vulnerable to a stack-based buffer overflow when the virtual machine or JNI natives are converting from UTF-8 characters to platform encoding. By sending an...

Security Bulletin: DataQuant for WebSphere is affected by a vulnerability in Apache Commons FileUpload (CVE-2014-0050)

Summary Apache Commons FileUpload and Tomcat are vulnerable to a denial of service, caused by the improper handling of Content-Type HTTP header for multipart requests. By sending a specially-crafted request, an attacker could exploit this vulnerability to cause the application to enter into an...

Vulnerability in gencore affects AIX,Vulnerability in gencore affects VIOS

IBM SECURITY ADVISORY First Issued: Tue Jan 19 16:15:13 CST 2021 |Updated: Tue Mar 30 09:09:39 CDT 2021 |Update: iFix now provided for AIX 7200-04-03 and VIOS 3.1.1.30. The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/gencoreadvisory.asc...

There are vulnerabilities in Perl that affect AIX.

IBM SECURITY ADVISORY First Issued: Wed Dec 9 16:36:39 CST 2020 |Updated: Thu Mar 4 08:59:07 CST 2021 |Update: iFixes now listed for AIX 7200-03-06, 7200-04-03, 7200-05-00, and | 7200-05-01. iFixes now listed for VIOS 3.1.0.50, 3.1.1.30, 3.1.2.0, and | 3.1.2.10. The most recent version of this...

Security Bulletin: IBM has released AIX and VIOS iFixes in response to a vulnerability in IBM POWER9 (CVE-2020-4788)

Summary IBM has released the following fixes for AIX and VIOS in response to CVE-2020-4788. Vulnerability Details CVEID: CVE-2020-4788 DESCRIPTION: IBM Power9 processors could allow a local user to obtain sensitive information from the data in the L1 cache under extenuating circumstances. CVSS Ba...

IBM has released AIX iFixes in response to a vulnerability in IBM POWER9,IBM has released VIOS iFixes in response to a vulnerability in IBM POWER9

IBM SECURITY ADVISORY First Issued: Thu Nov 19 17:01:56 CST 2020 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/power9advisory.asc https://aix.software.ibm.com/aix/efixes/security/power9advisory.asc...

Security Bulletin: Vulnerabilities in NTPv4 affect AIX (CVE-2020-11868, CVE-2020-13817, and CVE-2020-15025)

Summary There are vulnerabilities in NTPv4 that affect AIX. Vulnerability Details CVEID: CVE-2020-15025 DESCRIPTION: NTP is vulnerable to a denial of service, caused by a memory leak when a CMAC key is used and associated with a CMAC algorithm in the ntp.keys file in ntpd. By sending...

Security Bulletin: Vulnerabilities in BIND affect AIX (CVE-2020-8616 and CVE-2020-8617)

Summary There are vulnerabilities in BIND that affect AIX. Vulnerability Details CVEID: CVE-2020-8617 DESCRIPTION: ISC BIND is vulnerable to a denial of service, caused by a logic error in code which checks TSIG validity. A remote attacker could exploit this vulnerability to trigger an assertion...

There are vulnerabilities in BIND that impact AIX.,There are vulnerabilities in BIND that impact VIOS.

IBM SECURITY ADVISORY First Issued: Fri Aug 21 15:48:15 CDT 2020 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/bindadvisory17.asc https://aix.software.ibm.com/aix/efixes/security/bindadvisory17.asc...

Security Bulletin: Vulnerability in NTP affects AIX (CVE-2019-8936)

Summary There is a vulnerability in NTPv3 and NTPv4 that affects AIX. Vulnerability Details CVEID: CVE-2019-8936 DESCRIPTION: NTP is vulnerable to a denial of service, caused by a NULL pointer dereference in ntpcontrol.c. By sending specially crafted mode 6 packets, a remote authenticated attacke...

Security Bulletin: WebSphere Message Broker and IBM Integration Bus are affected by information disclosure vulnerability (CVE-2017-1126)

Summary IBM Integration Bus and WebSphere Message Broker have addressed the vulnerability that would allow an unauthorized user to obtain sensitive information about software versions, and which could lead to further attacks. Vulnerability Details CVEID: CVE-2017-1126 DESCRIPTION: IBM Integration...

Security Bulletin: Vulnerability in FreeBSD affects AIX (CVE-2018-6922)

Summary There is a vulnerability in FreeBSD that affects AIX. Vulnerability Details CVEID: CVE-2018-6922 DESCRIPTION: FreeBSD is vulnerable to a denial of service, caused by the use of an inefficient TCP reassembly algorithm. By sending specially-crafted TCP traffic, a remote attacker could explo...

Security Bulletin: Vulnerability in Xorg affects AIX (CVE-2018-14665)

Summary There is a vulnerability in Xorg that affects AIX. Vulnerability Details CVEID: CVE-2018-14665 DESCRIPTION: X.Org X server could allow a remote authenticated attacker to gain elevated privileges on the system, caused by improper validation of command line parameters. An attacker could...

There is a vulnerability in tcpdump that affects AIX.,There is a vulnerability in tcpdump that affects VIOS.

IBM SECURITY ADVISORY First Issued: Mon Feb 25 16:54:49 CST 2019 |Updated: Tue Apr 9 09:55:34 CDT 2019 |Update: Increased the lower impacted fileset levels for some fileset | levels. Please see the Fileset table in AFFECTED PRODUCTS AND VERSIONS | for more information. The most recent version of...

There is a vulnerability in Xorg that affects AIX.,There is a vulnerability in Xorg that affects VIOS.

IBM SECURITY ADVISORY First Issued: Tue Dec 11 09:32:52 CST 2018 |Updated: Tue Apr 9 09:52:17 CDT 2019 |Update: Added AIX 7100-04-07 and 7200-02-03 as affected. | Added iFixes for AIX 7100-04-07 and 7200-02-03. The most recent version of this document is available here:...