CVE-2021-29861

IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in EFS to expose sensitive information. IBM X-Force ID: 206085...

CVE-2021-29861

IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in EFS to expose sensitive information. IBM X-Force ID: 206085...

CVE-2021-29860

IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the libc.a library to expose sensitive information. IBM X-Force ID: 206084...

CVE-2021-29860

IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the libc.a library to expose sensitive information. IBM X-Force ID: 206084...

Code injection

IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in EFS to expose sensitive information. IBM X-Force ID: 206085...

Code injection

IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the libc.a library to expose sensitive information. IBM X-Force ID: 206084...

CVE-2021-29861

IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in EFS to expose sensitive information. IBM X-Force ID: 206085...

CVE-2021-29861

CVE-2021-29861 affects IBM AIX 7.1, 7.2 and VIOS 3.1. A vulnerability in EFS could allow a non‑privileged local user to disclose sensitive information. IBM’s advisory lists affected filesets and versions and provides remediation via APARs and iFixes: AIX 7.1.5.x (APAR IJ35780, IJ35780m7a/m8a/m9a,...

CVE-2021-29860

IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the libc.a library to expose sensitive information. IBM X-Force ID: 206084...

CVE-2021-29860

CVE-2021-29860 affects IBM AIX 7.1, 7.2 and VIOS 3.1 via a vulnerability in the libc.a library that could allow a non-privileged local user to expose sensitive information. IBM’s Security Bulletin (CVE-2021-29860) lists affected filesets and provides remediation through APARs and interim/fix pack...

CVE-2021-29861: Undefined Security Weakness

IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in EFS to expose sensitive information. IBM X-Force ID: 206085...

Vulnerability in EFS affects AIX,Vulnerability in EFS affects AIX (CVE-2021-29861)

IBM SECURITY ADVISORY First Issued: Tue Nov 16 13:44:43 CST 2021 |Updated: Fri Mar 17 11:52:34 CDT 2023 |Update: Corrected the affected upper fileset levels for AIX 7.1 TL5 | to show that SP11 is affected. Added iFix for 7.1 TL5 SP11. The most recent version of this document is available here:...

CVE-2021-29860

IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the libc.a library to expose sensitive information. IBM X-Force ID: 206084...

PT-2021-18524

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.1 through 7.2 VIOS version 3.1 Description The issue allows a non-privileged local user to exploit a vulnerability in EFS to expose sensitive information. Recommendations For IBM AIX versions 7.1 through 7.2, update to a...

CVE-2021-29861

IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in EFS to expose sensitive information. IBM X-Force ID: 206085...

PT-2021-18523

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.1 through 7.2 VIOS version 3.1 Description The issue allows a non-privileged local user to exploit a vulnerability in the libc.a library to expose sensitive information. Recommendations For IBM AIX versions 7.1 through 7.2,...

Security Bulletin: Vulnerabilities in GSKit fixed in IBM Security/Tivoli Directory Server for AIX/VIOS (CVE-2015-0138, CVE-2015-0159)

Summary GSKit is an IBM component that is used by IBM Security/Tivoli Directory Server. The GSKit that is shipped with IBM Security/Tivoli Directory Server contains multiple security vulnerabilities including the “FREAK: Factoring Attack on RSA-EXPORT keys" TLS/SSL client and server vulnerability...

Security Bulletin: Vulnerability in lpd affects AIX (CVE-2021-29693)

Summary There is a vulnerability in the lpd daemon that affects AIX. Vulnerability Details CVEID: CVE-2021-29693 DESCRIPTION: IBM AIX could allow a local user with elevated group privileges to exploit a vulnerability in the lpd daemon. CVSS Base score: 4.9 CVSS Temporal Score: See:...

Security Bulletin: Vulnerabilities in OpenSSL affect AIX (CVE-2021-23839, CVE-2021-23840, and CVE-2021-23841)

Summary There are vulnerabilities in OpenSSL used by AIX. Vulnerability Details CVEID: CVE-2021-23839 DESCRIPTION: OpenSSL could provide weaker than expected security, caused by incorrect SSLv2 rollback protection that allows for the inversion of the logic during a padding check. If the server is...

Security Bulletin: IBM has released AIX and VIOS iFixes in response to the vulnerabilities known as Spectre and Meltdown.

Summary IBM has released the following fixes for AIX and VIOS in response to CVE-2017-5715, CVE-2017-5753, and CVE-2017-5754. Vulnerability Details CVEID: CVE-2017-5715 CVEID: CVE-2017-5753 CVEID: CVE-2017-5754 iFixes released on August 17, 2018: Updated AIX and VIOS fixes for CVE-2017-5715, know...