1338 matches found
CVE-2022-43848
CVE-2022-43848 affects IBM AIX 7.1, 7.2, 7.3 and VIOS 3.1. A non-privileged local user can exploit a vulnerability in the AIX perfstat kernel extension to cause a denial of service (availability impact HIGH). The IBM bulletin lists specific APARs and iFixes across kernel, perfstat, pfcdd, NFS, TC...
CVE-2022-39165
CVE-2022-39165 affects IBM AIX 7.1, 7.2, 7.3 and VIOS 3.1. It is a local, non-privileged user vulnerability in the CAA component that can cause a denial of service. The IBM security bulletin notes an impact of Availability (A) = High with Privileges Required = None and Local access. AIX/VIOS patc...
CVE-2022-40233
CVE-2022-40233 concerns IBM AIX 7.1, 7.2, 7.3 and VIOS 3.1. A non-privileged local user could exploit a vulnerability in the AIX TCP/IP kernel extension to cause a denial of service. The IBM Security Bulletin lists vulnerable components and affected filesets across AIX 7.1–7.3 and VIOS 3.1, with ...
CVE-2022-43380
CVE-2022-43380 relates to IBM AIX 7.1/7.2/7.3 and VIOS 3.1 where a non-privileged local user can trigger a denial of service via exploitation of the AIX NFS kernel extension. The IBM Security Bulletin confirms the root cause is in the NFS kernel extension and lists affected filesets and AIX/VIOS ...
CVE-2022-43381
CVE-2022-43381 affects IBM AIX 7.1, 7.2, 7.3 and VIOS 3.1 via the AIX SMB client. A non-privileged local user can trigger a denial of service by exploiting the SMB client daemon. Affected filesets (smbc.rte) include 7.1.0.0–7.1.302.8 and 7.2.0.0–7.2.302.8; remediation is provided as fixes in smbc...
CVE-2022-43381 IBM AIX denial of service
IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in the AIX SMB client to cause a denial of service. IBM X-Force ID: 238639...
CVE-2022-43382
IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a local user with elevated privileges to exploit a vulnerability in the lpd daemon to cause a denial of service. IBM X-Force ID: 238641...
Design/Logic Flaw
IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a local user with elevated privileges to exploit a vulnerability in the lpd daemon to cause a denial of service. IBM X-Force ID: 238641...
CVE-2022-43382
CVE-2022-43382 affects IBM AIX 7.1, 7.2, 7.3 and VIOS 3.1. It arises from a vulnerability in the lpd daemon that allows a local user with elevated privileges to cause a denial of service. Affected filesets and AIX levels are listed in the IBM advisory IJ44552/IJ44559/IJ44562/IJ44564 with interim/...
PT-2022-26880 · Ibm · Vios +1
Name of the Vulnerable Software and Affected Versions: IBM AIX versions 7.1 through 7.3 VIOS version 3.1 Description: The issue allows a local user with elevated privileges to exploit a vulnerability in the lpd daemon, causing a denial of service. Recommendations: For IBM AIX versions 7.1 through...
PT-2022-24786 · Ibm · Aix +2
Name of the Vulnerable Software and Affected Versions: IBM AIX versions 7.1 through 7.3 VIOS version 3.1 Description: The issue allows a non-privileged local user to exploit a vulnerability in the AIX kernel to cause a denial of service. This can be achieved by exploiting the vulnerability in the...
PT-2022-25795 · Ibm · Vios +1
Name of the Vulnerable Software and Affected Versions: IBM AIX versions 7.1 through 7.3 VIOS version 3.1 Description: A non-privileged local user could exploit a vulnerability in the rm rlcache file command to obtain root privileges. Recommendations: For IBM AIX versions 7.1 through 7.3, consider...
PT-2022-27033 · Ibm · Aix +2
Name of the Vulnerable Software and Affected Versions: IBM AIX versions 7.1 through 7.3 VIOS version 3.1 Description: The issue allows a non-privileged local user to exploit a vulnerability in the AIX pfcdd kernel extension, causing a denial of service. Recommendations: For IBM AIX versions 7.1...
IBM AIX and VIOS Elevation of Privilege Vulnerability
IBM AIX is an open standards-based UNIX operating system developed by International Business Machines IBM for the IBM Power architecture. an elevation of privilege vulnerability exists in IBM AIX versions 7.1, 7.2, 7.3 and VIOS version 3.1. A local attacker could exploit the vulnerability to gain...
Security Bulletin: AIX is vulnerable to a denial of service due to lpd (CVE-2022-22444)
Summary UPDATED Sep 13 Added iFix information for 7.1 TL5 SP10 and 7.2 TL4 SP6: A vulnerability in the AIX lpd printer daemon could allow a local user with elevated privileges to cause a denial of service CVE-2022-22444. The lpd daemon is the remote print server on AIX. Vulnerability Details...
Security Bulletin: AIX is vulnerable to denial of service due to zlib and zlibNX (CVE-2018-25032)
Summary A vulnerability in zlib and zlibNX could allow a remote attacker to cause a denial of service CVE-2018-25032. AIX uses zlib and zlibNX as part of its data compression functions. Vulnerability Details CVEID:CVE-2018-25032 DESCRIPTION: Zlib is vulnerable to a denial of service, caused by a...
AIX is vulnerable to denial of service due to zlib and zlibNX
IBM SECURITY ADVISORY First Issued: Wed Sep 28 13:38:50 CDT 2022 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/zlibadvisory.asc https://aix.software.ibm.com/aix/efixes/security/zlibadvisory.asc...
Security Bulletin: Due to RPM, AIX is vulnerable to arbitrary code execution (CVE-2021-20271), RPM database corruption (CVE-2021-3421), and denial of service (CVE-2021-20266)
Summary AIX is vulnerable to arbitrary code execution CVE-2021-20271, RPM database corruption CVE-2021-3421, and denial of service CVE-2021-20266 due to RPM. RPM is used by AIX for package management. Vulnerability Details CVEID:CVE-2021-20271 DESCRIPTION: RPM could allow a remote attacker to...
AIX is vulnerable to arbitrary code execution and RPM database corruption and denial of service due to RPM.
IBM SECURITY ADVISORY First Issued: Fri Sep 23 09:39:22 CDT 2022 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/rpmadvisory.asc https://aix.software.ibm.com/aix/efixes/security/rpmadvisory.asc...
