IBM VIOS operating system command injection vulnerability

IBM Vios is part of IBM USA's PowerVm Editions hardware feature that helps share physical I/O resources between client logical partitions within a server. IBM VIOS lscore has an operating system command injection vulnerability that stems from an lscore command input validation error, and this...

CVE-2021-38991

IBM AIX 7.0, 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the lscore command which could lead to code execution. IBM X-Force ID: 212953...

Code injection

IBM AIX 7.0, 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the lscore command which could lead to code execution. IBM X-Force ID: 212953...

CVE-2021-38991

IBM AIX 7.0, 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the lscore command which could lead to code execution. IBM X-Force ID: 212953...

CVE-2021-38991

CVE-2021-38991 (IBM AIX/VIOS lscore vulnerability) A vulnerability in the IBM AIX lscore command (affecting AIX 7.0, 7.1, 7.2 and VIOS 3.1) can be triggered by a non-privileged local user due to an input validation error in lscore. Successful exploitation could lead to code execution with high im...

CVE-2021-38990

IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the mount command which could lead to code execution. IBM X-Force ID: 212952...

CVE-2021-38990

IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the mount command which could lead to code execution. IBM X-Force ID: 212952...

CVE-2021-38990

IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the mount command which could lead to code execution. IBM X-Force ID: 212952...

Design/Logic Flaw

IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the mount command which could lead to code execution. IBM X-Force ID: 212952...

There is a vulnerability in the lscore command that affects AIX.,There is a vulnerability in the lscore command that affects VIOS.

IBM SECURITY ADVISORY First Issued: Mon Jan 10 13:18:02 CST 2022 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/lscoreadvisory.asc https://aix.software.ibm.com/aix/efixes/security/lscoreadvisory.asc...

CVE-2021-38991

IBM AIX 7.0, 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the lscore command which could lead to code execution. IBM X-Force ID: 212953...

CVE-2021-38990

CVE-2021-38990 affects IBM AIX 7.1, 7.2, and VIOS 3.1 where a vulnerability in the mount command can be exploited by a non-privileged local user to achieve code execution. Root cause is related to the mount utility; affected filesets are bos.rte.filesystem (AIX TLs 7.1.5.x, 7.2.4.x, 7.2.5.x) and ...

CVE-2021-38990

IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the mount command which could lead to code execution. IBM X-Force ID: 212952...

There is a vulnerability in the mount command that affects AIX.,There is a vulnerability in the mount command that affects VIOS.

IBM SECURITY ADVISORY First Issued: Thu Jan 6 09:30:39 CST 2022 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/mountadvisory.asc https://aix.software.ibm.com/aix/efixes/security/mountadvisory.asc...

Vulnerabilities in OpenSSH affect AIX.

IBM SECURITY ADVISORY First Issued: Thu Jan 6 09:17:41 CST 2022 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/opensshadvisory14.asc https://aix.software.ibm.com/aix/efixes/security/opensshadvisory14.asc...

CVE-2021-29861

IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in EFS to expose sensitive information. IBM X-Force ID: 206085...

CVE-2021-29861

IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in EFS to expose sensitive information. IBM X-Force ID: 206085...

CVE-2021-29860

IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the libc.a library to expose sensitive information. IBM X-Force ID: 206084...

CVE-2021-29860

IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the libc.a library to expose sensitive information. IBM X-Force ID: 206084...

Code injection

IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the libc.a library to expose sensitive information. IBM X-Force ID: 206084...