Vulnerability in OpenSSL affects AIX (CVE-2018-0739)

IBM SECURITY ADVISORY First Issued: Mon Apr 30 11:00:38 CDT 2018 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/openssladvisory26.asc https://aix.software.ibm.com/aix/efixes/security/openssladvisory26.asc...

Vulnerability in sendmail impacts AIX (CVE-2014-3956),Vulnerability in sendmail impacts VIOS (CVE-2014-3956)

IBM SECURITY ADVISORY First Issued: Fri Apr 6 11:18:40 CDT 2018 |Updated: Mon Sep 17 09:18:47 CDT 2018 |Update: Clarified that AIX 7.2 TL0 SP6 and bos.net.tcp.sendmail fileset level | 7.2.0.3 are impacted. An iFix for AIX 7.2 TL0 SP6 is now available. The most recent version of this document is...

NTP CVE-2018-7185 Denial of Service Vulnerability

Description NTP is prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause a denial-of-service condition, denying service to legitimate users. NTP version 4.2.6 prior to 4.2.8p11 are vulnerable. Technologies Affected IBM AIX 5.3 IBM AIX 6.1 IBM AIX 7.1 IBM Aix 7.2...

Vulnerability impacts AIX and VIOS (CVE-2018-1383),Vulnerability impacts VIOS and VIOS (CVE-2018-1383)

IBM SECURITY ADVISORY First Issued: Thu Feb 8 13:49:23 CST 2018 |Updated: Tue Feb 13 11:05:56 CST 2018 |Update: CVE description was updated to provide additional detail. The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/aixbaseadvisory.asc...

(bellmail) Vulnerabilities in bellmail / caccelstat / iostat / lquerypv / restbyinode / vmstat affect AIX (CVE-2017-1692),(bellmail) Vulnerabilities in bellmail / caccelstat / iostat / lquerypv / restbyinode / vmstat affect VIOS (CVE-2017-1692),(caccelstat) Vulnerabilities in bellmail / caccelstat / iostat / lquerypv / restbyinode / vmstat affect AIX (CVE-2017-1692),(iostat) Vulnerabilities in bellmail / caccelstat / iostat / lquerypv / restbyinode / vmstat affect AIX (CVE-2017-1692),(lquerypv) Vulnerabilities in bellmail / caccelstat / iostat / lquerypv / restbyinode / vmstat affect AIX (CVE-2017-1692),(lquerypv) Vulnerabilities in bellmail / caccelstat / iostat / lquerypv / restbyinode / vmstat affect VIOS (CVE-2017-1692),(restbyinode) Vulnerabilities in bellmail / caccelstat / iostat / lquerypv / restbyinode / vmstat affect AIX (CVE-2017-1692),(restbyinode) Vulnerabilities in bellmail / caccelstat / iostat / lquerypv / restbyinode / vmstat affect VIOS (CVE-2017-1692),(vmstat) Vulnerabilities in bellmail / caccelstat / iostat / lquerypv / restbyinode / vmstat affect AIX (CVE-2017-1692)

IBM SECURITY ADVISORY First Issued: Mon Feb 5 13:19:26 CST 2018 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/suidadvisory.asc https://aix.software.ibm.com/aix/efixes/security/suidadvisory.asc...

IBM has released AIX and VIOS iFixes in response to the vulnerabilities known as Spectre and Meltdown.,IBM has released VIOS and VIOS iFixes in response to the vulnerabilities known as Spectre and Meltdown.

wnadvisory.asc: Version 4 IBM SECURITY ADVISORY First Issued: Thu Jan 25 08:15:51 CST 2018 |Updated: Fri Aug 17 08:05:01 CDT 2018 |Update: Added a link to the bulletin for CVE-2017-5715, known as Spectre, | regarding updated iFixes that are only applicable to some POWER9 systems. | The bulletin i...

There are multiple vulnerabilities in tcpdump that impact AIX.

IBM SECURITY ADVISORY First Issued: Wed Nov 8 09:27:01 CST 2017 |Updated: Wed Feb 28 09:33:13 CST 2018 |Update: Corrected the APARs listed under the APAR section. The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/tcpdumpadvisory3.asc...

RHEL 6 : kernel (RHSA-2017:2429)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2017:2429 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: The NFSv2 and NFSv3 server implementations in t...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 6.7 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

There is a vulnerability in bellmail that impacts AIX.,Vulnerability in bellmail affects AIX (CVE-2017-1093)

IBM SECURITY ADVISORY First Issued: Sun Jan 29 01:19:56 CST 2017 |Updated: Wed Jul 26 12:40:04 CDT 2017 |Update 1: Changed impacted upper level fileset level for AIX 7.2.1 to | bos.net.tcp.clientcore 7.2.1.0. The most recent version of this document is available here:...

IBM AIX 6.1 / 7.1 / 7.2 Bellmail Privilege Escalation

!/usr/bin/sh CVE-2016-8972/bellmailroot.sh: IBM AIX Bellmail local root Affected versions: AIX 6.1, 7.1, 7.2 VIOS 2.2.x Fileset Lower Level Upper Level KEY --------------------------------------------------------- bos.net.tcp.client 6.1.9.0 6.1.9.200 keywfs bos.net.tcp.client 7.1.3.0 7.1.3.47...

IBM AIX 6.1/7.1/7.2 - 'Bellmail' Local Privilege Escalation

!/usr/bin/sh CVE-2016-8972/bellmailroot.sh: IBM AIX Bellmail local root Affected versions: AIX 6.1, 7.1, 7.2 VIOS 2.2.x Fileset Lower Level Upper Level KEY --------------------------------------------------------- bos.net.tcp.client 6.1.9.0 6.1.9.200 keywfs bos.net.tcp.client 7.1.3.0 7.1.3.47...

Vulnerability in bellmail affects AIX,Vulnerability in bellmail affects VIOS

IBM SECURITY ADVISORY First Issued: Thu Dec 15 15:12:23 CST 2016 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/bellmailadvisory.asc https://aix.software.ibm.com/aix/efixes/security/bellmailadvisory.asc...

Vulnerabilities in BIND impact AIX,Vulnerabilities in BIND impact VIOS

IBM SECURITY ADVISORY First Issued: Fri Nov 18 08:19:36 CST 2016 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/bindadvisory13.asc https://aix.software.ibm.com/aix/efixes/security/bindadvisory13.asc...

Vulnerability in lquerylv in LVM impacts AIX,Vulnerability in lquerylv in LVM impacts VIOS

IBM SECURITY ADVISORY First Issued: Mon Nov 7 10:35:13 CST 2016 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/lquerylvadvisory.asc https://aix.software.ibm.com/aix/efixes/security/lquerylvadvisory.asc...

Vulnerability in lsmcode affects AIX,Vulnerability in lsmcode affects VIOS

lsmcodeadvisory2.asc: Version 5 Version 5 Issued: Fri Nov 11 08:21:26 CST 2016 Version 5 Changes: iFixes for AIX 7100-04-02 and 7200-00-02 no longer require a reboot. IBM SECURITY ADVISORY First Issued: Mon Oct 17 08:54:26 CDT 2016 |Updated: Fri Nov 11 08:21:26 CST 2016 |Update: iFixes for AIX...

Vulnerabilities in NTP affect AIX,Vulnerabilities in NTP affect VIOS

ntpadvisory7.asc: Version 2 Version 2 Issued: Tue Sep 13 08:23:22 CDT 2016 Version 2 Changes: Changed the impacted upper level filesets listed for NTPv4. The new levels should match the prereqs as listed in the iFixes. IBM SECURITY ADVISORY First Issued: Tue Sep 6 09:07:16 CDT 2016 |Updated: Tue...

CVE-2016-0281

The mustendd driver in IBM AIX 5.3, 6.1, 7.1, and 7.2 and VIOS 2.2.x, when the jumboframes feature is not enabled, allows remote attackers to cause a denial of service FC1763 or FC5899 adapter crash via crafted packets...

Default credentials

IBM AIX 5.3, 6.1, 7.1, and 7.2 and VIOS 2.2.x do not default to the latest TLS version, which makes it easier for man-in-the-middle attackers to obtain sensitive information via unspecified vectors...

Design/Logic Flaw

The mustendd driver in IBM AIX 5.3, 6.1, 7.1, and 7.2 and VIOS 2.2.x, when the jumboframes feature is not enabled, allows remote attackers to cause a denial of service FC1763 or FC5899 adapter crash via crafted packets...