CVE-2022-43380

CVE-2022-43380 relates to IBM AIX 7.1/7.2/7.3 and VIOS 3.1 where a non-privileged local user can trigger a denial of service via exploitation of the AIX NFS kernel extension. The IBM Security Bulletin confirms the root cause is in the NFS kernel extension and lists affected filesets and AIX/VIOS ...

CVE-2022-43849: Improper Input Validation

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in the AIX pfcdd kernel extension to cause a denial of service. IBM X-Force ID: 239170...

CVE-2022-43380: Undefined Security Weakness

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX NFS kernel extension to cause a denial of service. IBM X-Force ID: 238640...

CVE-2022-40233: Improper Input Validation

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX TCP/IP kernel extension to cause a denial of service. IBM X-Force ID: 235599...

CVE-2022-43848: Improper Input Validation

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX perfstat kernel extension to cause a denial of service. IBM X-Force ID: 239169...

Diving into an Old Exploit Chain and Discovering 3 new SIP-Bypass Vulnerabilities

More than two years ago, a researcher, A2nkF demonstrated the exploit chain from root privilege escalation to SIP-Bypass up to arbitrary kernel extension loading. In this blog entry, we will discuss how we discovered 3 more vulnerabilities from the old exploit chain...

PT-2022-24786 · Ibm · Aix +2

Name of the Vulnerable Software and Affected Versions: IBM AIX versions 7.1 through 7.3 VIOS version 3.1 Description: The issue allows a non-privileged local user to exploit a vulnerability in the AIX kernel to cause a denial of service. This can be achieved by exploiting the vulnerability in the...

PT-2022-26878 · Ibm · Aix +2

Name of the Vulnerable Software and Affected Versions: IBM AIX versions 7.1 through 7.3 VIOS version 3.1 Description: The issue allows a non-privileged local user to exploit a vulnerability in the AIX NFS kernel extension to cause a denial of service. Recommendations: For IBM AIX versions 7.1...

PT-2022-27033 · Ibm · Aix +2

Name of the Vulnerable Software and Affected Versions: IBM AIX versions 7.1 through 7.3 VIOS version 3.1 Description: The issue allows a non-privileged local user to exploit a vulnerability in the AIX pfcdd kernel extension, causing a denial of service. Recommendations: For IBM AIX versions 7.1...

PT-2022-27032 · Ibm · Aix +2

Name of the Vulnerable Software and Affected Versions: IBM AIX versions 7.1 through 7.3 VIOS version 3.1 Description: The issue allows a non-privileged local user to exploit a vulnerability in the AIX kernel extension to cause a denial of service. This can be achieved through the AIX perfstat...

Apple macOS Security Feature Issue Vulnerability (CNVD-2024-17859)

Apple macOS is a specialized operating system developed by Apple for Mac computers. A security signature issue vulnerability exists in Apple macOS prior to version 11.4, which originates in the Kext Management subsystem, and can be exploited by a local attacker to bypass implemented security...

There is a vulnerability in the AIX pmsvcs kernel extension for VIOS.,There is a vulnerability in the AIX pmsvcs kernel extension.

IBM SECURITY ADVISORY First Issued: Fri Mar 4 08:58:04 CST 2022 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/pmsvcsadvisory.asc https://aix.software.ibm.com/aix/efixes/security/pmsvcsadvisory.asc...

IBM AIX 资源管理错误漏洞

IBM AIX is an open standards-based UNIX operating system developed by IBM for the IBM Power architecture. IBM AIX denial-of-service vulnerability, which stems from the product AIX pfcdd kernel extension does not do the correct processing of incoming error messages, an attacker can use the...

The vulnerability of the IOMobileFrameBuffer kernel extension in operating systems macOS, iOS, iPadOS, and watchOS allows a hacker to execute arbitrary code.

The vulnerability of the IOMobileFrameBuffer kernel extension in operating systems macOS, iOS, iPadOS, and watchOS stems from the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...

Apple Releases Urgent 0-Day Bug Patch for Mac, iPhone and iPad Devices

Apple on Monday rolled out an urgent security update for iOS, iPadOS, and macOS to address a zero-day flaw that it said may have been actively exploited, making it the thirteenth such vulnerability Apple has patched since the start of this year. The updates, which arrive less than a week after th...

Apple macOS 权限许可和访问控制问题漏洞

Apple macOS is a specialized operating system developed for Mac computers by Apple Inc. in the United States. The macOS is vulnerable to a privilege permission and access control issue, which is caused by an unspecified error in Kext management. Native applications can bypass Privacy preferences...

Apple macOS 安全特征问题漏洞

Apple macOS is a specialized operating system developed by Apple for Mac computers. A security signature issue vulnerability exists in Apple macOS prior to version 11.4, which originates in the Kext Management subsystem, and can be exploited by a local attacker to bypass implemented security...

CVE-2021-1779

A logic error in kext loading was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. An application may be able to execute arbitrary code with system privileges...

CVE-2021-1779

A logic error in kext loading was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. An application may be able to execute arbitrary code with system privileges...

Unspecified Vulnerability in Trend Micro Antivirus for Mac (NVD-C-2020-233707)

Trend Micro Antivirus for Mac is a set of antivirus software based on Mac platform from Trend Micro. A security vulnerability exists in Trend Micro Antivirus for Mac 2020 Consumer that originates from the software's susceptibility to a specific kernel extension request attack, which can be...