EUVD-2021-25428

Malware in sbrugna...

Security Bulletin: Vulnerability in lscore affects AIX (CVE-2021-38991)

Summary There is a vulnerability in the lscore command that affects AIX. Vulnerability Details CVEID: CVE-2021-38991 DESCRIPTION: IBM AIX could allow a non-privileged local user to exploit a vulnerability in the lscore command which could lead to code execution. CVSS Base score: 8.4 CVSS Temporal...

IBM VIOS operating system command injection vulnerability

IBM Vios is part of IBM USA's PowerVm Editions hardware feature that helps share physical I/O resources between client logical partitions within a server. IBM VIOS lscore has an operating system command injection vulnerability that stems from an lscore command input validation error, and this...

CVE-2021-38991

IBM AIX 7.0, 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the lscore command which could lead to code execution. IBM X-Force ID: 212953...

CVE-2021-38991

IBM AIX 7.0, 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the lscore command which could lead to code execution. IBM X-Force ID: 212953...

CVE-2021-38991

CVE-2021-38991 (IBM AIX/VIOS lscore vulnerability) A vulnerability in the IBM AIX lscore command (affecting AIX 7.0, 7.1, 7.2 and VIOS 3.1) can be triggered by a non-privileged local user due to an input validation error in lscore. Successful exploitation could lead to code execution with high im...

CVE-2021-38991

IBM AIX 7.0, 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the lscore command which could lead to code execution. IBM X-Force ID: 212953...

AIX (IJ36815)

The version of AIX installed on the remote host is prior to APAR IJ36815. It is, therefore, affected by a vulnerability as referenced in the IJ36815 advisory. - IBM AIX 7.0, 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the lscore command which could...

AIX (IJ36805)

The version of AIX installed on the remote host is prior to APAR IJ36805. It is, therefore, affected by a vulnerability as referenced in the IJ36805 advisory. - IBM AIX 7.0, 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the lscore command which could...

AIX (IJ36816)

The version of AIX installed on the remote host is prior to APAR IJ36816. It is, therefore, affected by a vulnerability as referenced in the IJ36816 advisory. - IBM AIX 7.0, 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the lscore command which could...

AIX (IJ36806)

The version of AIX installed on the remote host is prior to APAR IJ36806. It is, therefore, affected by a vulnerability as referenced in the IJ36806 advisory. - IBM AIX 7.0, 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the lscore command which could...

AIX (IJ36810)

The version of AIX installed on the remote host is prior to APAR IJ36810. It is, therefore, affected by a vulnerability as referenced in the IJ36810 advisory. - IBM AIX 7.0, 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the lscore command which could...

There is a vulnerability in the lscore command that affects AIX.,There is a vulnerability in the lscore command that affects VIOS.

IBM SECURITY ADVISORY First Issued: Mon Jan 10 13:18:02 CST 2022 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/lscoreadvisory.asc https://aix.software.ibm.com/aix/efixes/security/lscoreadvisory.asc...