There is a vulnerability in the AIX audit user commands for VIOS.,There is a vulnerability in the AIX audit user commands.

IBM SECURITY ADVISORY First Issued: Mon Feb 28 16:34:28 CST 2022 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/auditadvisory.asc https://aix.software.ibm.com/aix/efixes/security/auditadvisory.asc...

Security vulnerabilities in Perl for AIX,Security vulnerabilities in Perl for VIOS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 IBM SECURITY ADVISORY First Issued: Wed Nov 20 13:06:27 CST 2013 |Updated: Wed Dec 4 10:00:31 CST 2013 |Update: Corrected CVSS scoring information for CVEs |Update: Includes AIX 5.3 in appropriate places The most recent version of this document is...

Perl Digest Module Digest->new() Code Injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 IBM SECURITY ADVISORY First Issued: Mon Nov 22 15:00:14 CST 2011 | Updated: Thu Feb 7 13:01:41 CST 2013 | Fixed vulnerable fileset levels | Added VIOS Levels under section V for Interim Fixes | Fixed availability dates The most recent version of this...

AIX is vulnerable to a denial of service due to lpd

IBM SECURITY ADVISORY First Issued: Tue Jun 14 14:27:45 CDT 2022 |Updated: Tue Sep 13 13:16:19 CDT 2022 |Update: Added iFix information for 7.1 TL5 SP10 and 7.2 TL4 SP6. The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/lpdadvisory2.asc...

AIX is affected by information disclosure due to Python (CVE-2024-28757)

IBM SECURITY ADVISORY First Issued: Thu Jun 13 15:37:38 CDT 2024 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/pythonadvisory9.asc Security Bulletin: AIX is affected by information disclosure due to Python CVE-2024-28757...

There is a vulnerability in the AIX pmsvcs kernel extension for VIOS.,There is a vulnerability in the AIX pmsvcs kernel extension.

IBM SECURITY ADVISORY First Issued: Fri Mar 4 08:58:04 CST 2022 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/pmsvcsadvisory.asc https://aix.software.ibm.com/aix/efixes/security/pmsvcsadvisory.asc...

AIX is vulnerable to arbitrary command execution due to invscout

IBM SECURITY ADVISORY First Issued: Wed Apr 12 12:32:10 CDT 2023 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/invscoutadvisory4.asc Security Bulletin: AIX is vulnerable to arbitrary command execution due to invscout CVE-2023-28528...

AIX is vulnerable to arbitrary code execution and RPM database corruption and denial of service due to RPM.

IBM SECURITY ADVISORY First Issued: Fri Sep 23 09:39:22 CDT 2022 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/rpmadvisory.asc https://aix.software.ibm.com/aix/efixes/security/rpmadvisory.asc...

Multiple vulnerabilities in IBM Java SDK affect AIX

IBM SECURITY ADVISORY First Issued: Fri Jul 31 13:04:25 CDT 2015 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/javajuly2015advisory.asc https://aix.software.ibm.com/aix/efixes/security/javajuly2015advisory.asc...

Multiple OpenSSL vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 IBM SECURITY ADVISORY First Issued: Tues Feb 25 14:07:48 CDT 2014 | Updated: Mon Mar 3 11:46:39 CDT 2014 | Update: Clarified vulnerable filesets The most recent version of this document is available here:...

AIX is vulnerable to a denial of service due to the AIX SMB client

IBM SECURITY ADVISORY First Issued: Wed Dec 20 12:50:52 CST 2023 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/smbcdadvisory3.asc Security Bulletin: AIX is vulnerable to a denial of service due to the AIX SMB client CVE-2023-45165...

AIX IBM SDK Java JSSE vulnerability

IBM SECURITY ADVISORY First Issued: Mon Apr 13 12:11:24 CDT 2015 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/javajsseadvisory.asc https://aix.software.ibm.com/aix/efixes/security/javajsseadvisory.asc...

Multiple vulnerabilities in cURL libcurl affect AIX

IBM SECURITY ADVISORY First Issued: Mon Dec 11 13:22:02 CST 2023 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/curladvisory3.asc Security Bulletin: Multiple vulnerabilities in cURL libcurl affect AIX...

AIX is vulnerable to a denial of service due to libxml2

IBM SECURITY ADVISORY First Issued: Tue Jul 25 11:08:32 CDT 2023 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/libxml2advisory5.asc Security Bulletin: AIX is vulnerable to a denial of service due to libxml2 CVE-2023-29469 and...

AIX is affected by a denial of service due to Python

IBM SECURITY ADVISORY First Issued: Tue Mar 14 13:01:15 CDT 2023 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/pythonadvisory4.asc Security Bulletin: AIX is affected by a denial of service CVE-2022-45061 due to Python...

Vulnerability in use of socketpair

IBM SECURITY ADVISORY First Issued: Tue Jun 5 13:38:09 CDT 2012 | Updated: Wed Oct 3 10:13:19 CDT 2012 | Update: SP availability date and the lslpp assessment | Update: New ifixes for the latest SP's | Updated: Thu Dec 12 12:55:11 CST 2013 | Update: 1. Added KEYs for parsing purposes | 2. Moved t...

Vulnerability in EFS affects AIX

IBM SECURITY ADVISORY First Issued: Tue Nov 16 13:44:43 CST 2021 |Updated: Fri Mar 17 11:52:34 CDT 2023 |Update: Corrected the affected upper fileset levels for AIX 7.1 TL5 | to show that SP11 is affected. Added iFix for 7.1 TL5 SP11. The most recent version of this document is available here:...

There is a vulnerability in the lpd daemon that affects AIX.,There is a vulnerability in the lpd daemon that affects VIOS.

IBM SECURITY ADVISORY First Issued: Fri Jun 25 09:22:44 CDT 2021 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/lpdadvisory.asc https://aix.software.ibm.com/aix/efixes/security/lpdadvisory.asc...

Vulnerability in AIX TCP stack,Vulnerability in VIOS TCP stack

IBM SECURITY ADVISORY First Issued: Fri Feb 3 10:20:44 CST 2012 | Updated: Mon Feb 6 08:56:46 CST 2012 | Updated AIX 53 TL 12 ifix | Updated: Wed Feb 8 16:18:36 CST 2012 | Added VIOS ifixes | Updated: Wed Feb 29 16:32:13 CST 2012 | Added 6.1 TL7 SP3 and 7.1 TL1 SP3 ifixes | Updated: Wed Mar 21...

AIX is vulnerable to denial of service due to ISC BIND

IBM SECURITY ADVISORY First Issued: Thu Sep 7 13:08:07 CDT 2023 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/bindadvisory24.asc Security Bulletin: AIX is vulnerable to denial of service due to ISC BIND CVE-2023-2828...

AIX is vulnerable to arbitrary command execution

IBM SECURITY ADVISORY First Issued: Wed Apr 12 12:36:51 CDT 2023 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/librtsadvisory.asc Security Bulletin: AIX is vulnerable to arbitrary command execution CVE-2023-26286...

AIX is affected by arbitrary code execution and denial of service due to Python

IBM SECURITY ADVISORY First Issued: Tue Nov 1 10:11:15 CDT 2022 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/pythonadvisory2.asc https://aix.software.ibm.com/aix/efixes/security/pythonadvisory2.asc...

There is a vulnerability in the AIX smbcd daemon.

IBM SECURITY ADVISORY First Issued: Thu Feb 24 14:37:23 CST 2022 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/smbcdadvisory.asc https://aix.software.ibm.com/aix/efixes/security/smbcdadvisory.asc...

Vulnerabilities in MD5 Signature and Hash Algorithm and TLS 1.2 affects sendmail imap and pop3d on AIX,Vulnerabilities in MD5 Signature and Hash Algorithm and TLS 1.2 affects sendmail imap and pop3d on AIX,Vulnerabilities in MD5 Signature and Hash Algorithm and TLS 1.2 affects sendmail imap and pop3d on VIOS,Vulnerabilities in MD5 Signature and Hash Algorithm and TLS 1.2 affects sendmail imap pop3d ftp/ftpd and ndpd-host/ndpd-router on AIX

nettcpadvisory2.asc: Version 4 Version 4 Issued: Thu Oct 20 10:56:28 CDT 2016 Version 4 Changes: New iFixes provided for AIX 5.3.12.9, 6.1.9.5, 6.1.9.6, 7.1.3.5, and 7.1.3.6. For security reasons, it is highly recommended to install these new iFixes. Bulletin scope increased to include ftp/ftpd a...

tftp Security Vulnerability

IBM SECURITY ADVISORY First Issued: Wed Jul 3 09:33:57 CDT 2013 | Updated: Mon Oct 14 20:17:56 CDT 2013 | Update: Fixed vulnerable fileset levels | Update: More workarounds and CVSS Vector | Update: Includes VIOS in the vulnerability summary | Updated: Thu Dec 12 12:55:11 CST 2013 | Update: 1...

AIX is affected by a denial of service due to Python (CVE-2024-0450)

IBM SECURITY ADVISORY First Issued: Mon Jun 24 15:07:51 CDT 2024 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/pythonadvisory10.asc Security Bulletin: AIX is affected by a denial of service due to Python CVE-2024-0450...

AIX is vulnerable to denial of service due to zlib and zlibNX

IBM SECURITY ADVISORY First Issued: Wed Sep 28 13:38:50 CDT 2022 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/zlibadvisory.asc https://aix.software.ibm.com/aix/efixes/security/zlibadvisory.asc...

There is a vulnerability in the AIX pfcdd kernel extension for VIOS.,There is a vulnerability in the AIX pfcdd kernel extension.

IBM SECURITY ADVISORY First Issued: Fri Mar 4 09:00:01 CST 2022 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/pfcddadvisory.asc https://aix.software.ibm.com/aix/efixes/security/pfcddadvisory.asc...

Multiple vulnerabilities in IBM Java SDK affect AIX

IBM SECURITY ADVISORY First Issued: Mon Jun 24 15:10:30 CDT 2024 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/javajun2024advisory.asc Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect AIX...

AIX is vulnerable to security restrictions bypass due to cURL libcurl (CVE-2024-0853)

IBM SECURITY ADVISORY First Issued: Thu Jun 20 15:10:42 CDT 2024 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/curladvisory5.asc Security Bulletin: AIX is vulnerable to security restrictions bypass due to cURL libcurl CVE-2024-0853...

AIX is vulnerable to an SSL server spoof due to Apache Commons HttpClient

IBM SECURITY ADVISORY First Issued: Thu Apr 13 13:44:57 CDT 2023 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/commonshttpadvisory.asc Security Bulletin: AIX is vulnerable to an SSL server spoof due to Apache Commons HttpClient...

AIX is affected by a denial of service due to Python

IBM SECURITY ADVISORY First Issued: Thu Dec 22 10:15:28 CST 2022 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/pythonadvisory3.asc https://aix.software.ibm.com/aix/efixes/security/pythonadvisory3.asc...

There are multiple vulnerabilities in the AIX kernel,There are multiple vulnerabilities in the AIX kernel for VIOS

IBM SECURITY ADVISORY First Issued: Wed Aug 25 14:58:13 CDT 2021 |Update 2: Wed Sep 1 16:11:34 CDT 2021 |Update: Additional iFixes are now available. | Additional iFixes are now available for: | AIX 7100-05-06 and 7100-05-07 | AIX 7200-03-05 and 7200-03-06 | AIX 7200-04-02 and 7200-04-03 | AIX...

Vulnerability in AIX sendmail

IBM SECURITY ADVISORY First Issued: Mon Jul 16 13:28:25 CDT 2012 | Updated: Tue Sept 27 9:50:28 CDT 2012 | Update: New ifixes to include sendmailssl and sendmailnossl | Update: Corrected file names | Update: New ifixes for the latest SP's | Updated: Thu Dec 12 12:55:11 CST 2013 | Update: 1. Added...

AIX is vulnerable to security restrictions bypass due to cURL libcurl (CVE-2023-46218)

IBM SECURITY ADVISORY First Issued: Wed Mar 6 15:05:06 CST 2024 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/curladvisory4.asc Security Bulletin: AIX is vulnerable to security restrictions bypass due to cURL libcurl CVE-2023-46218...

Multiple vulnerabilities in IBM Java SDK affect AIX

IBM SECURITY ADVISORY First Issued: Thu Aug 31 12:31:07 CDT 2023 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/javaaug2023advisory.asc Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect AIX...

AIX is affected by information disclosure (CVE-2023-45803) and arbitrary code execution (CVE-2024-6345) due to Python

IBM SECURITY ADVISORY First Issued: Mon Aug 12 15:22:35 CDT 2024 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/pythonadvisory11.asc Security Bulletin: AIX is affected by information disclosure CVE-2023-45803 and arbitrary code executi...

AIX is vulnerable to a denial of service due to libxml2 (CVE-2022-29824)

IBM SECURITY ADVISORY First Issued: Mon Sep 12 15:07:01 CDT 2022 |Updated: Mon Dec 12 12:49:47 CST 2022 |Update: Added iFixes for AIX 7.2 TL5 SP5 and VIOS 3.1.4.10. The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/libxml2advisory3.asc...

Vulnerability in AIX inet

IBM SECURITY ADVISORY First Issued: Tue Jun 4 14:01:37 CDT 2013 | Updated: Mon Oct 14 22:15:38 CDT 2013 | Update: Workaround section cleaned up | Update: Reboot required | Update: Includes VIOS in the vulnerability summary | Updated: Thu Dec 12 12:55:11 CST 2013 | Update: 1. Added KEYs for parsin...

AIX is vulnerable to arbitrary command execution due to invscout

IBM SECURITY ADVISORY First Issued: Thu Nov 30 10:49:53 CST 2023 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/invscoutadvisory5.asc Security Bulletin: AIX is vulnerable to arbitrary command execution due to invscout CVE-2023-45168...

Multiple vulnerabilities in IBM Java SDK affect AIX

IBM SECURITY ADVISORY First Issued: Thu Dec 22 10:09:37 CST 2022 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/javadec2022advisory.asc https://aix.software.ibm.com/aix/efixes/security/javadec2022advisory.asc...

AIX is vulnerable to a privilege escalation vulnerability,AIX kernel is vulnerable to a privilege escalation vulnerability

IBM SECURITY ADVISORY First Issued: Mon Sep 12 13:12:47 CDT 2022 |Updated: Mon Oct 10 14:29:18 CDT 2022 |Update: Corrected the affected upper fileset levels for VIOS 3.1.2.30 and | 3.1.2.40. Added iFixes with the correct prereqs for VIOS 3.1.2.30 and | 3.1.2.40. The most recent version of this...

There is a vulnerability in the lscore command that affects AIX.,There is a vulnerability in the lscore command that affects VIOS.

IBM SECURITY ADVISORY First Issued: Mon Jan 10 13:18:02 CST 2022 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/lscoreadvisory.asc https://aix.software.ibm.com/aix/efixes/security/lscoreadvisory.asc...

AIX is affected by security restrictions bypass due to Python

IBM SECURITY ADVISORY First Issued: Fri Aug 18 09:49:04 CDT 2023 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/pythonadvisory5.asc Security Bulletin: AIX is affected by security restrictions bypass CVE-2023-24329 due to Python...

Multiple vulnerabilities in IBM Java SDK affect AIX

IBM SECURITY ADVISORY First Issued: Mon Nov 11 15:28:03 CST 2024 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/javanov2024advisory.asc Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect AIX...

AIX is vulnerable to arbitrary code execution (CVE-2023-36328) due to tcl

IBM SECURITY ADVISORY First Issued: Thu Nov 7 15:49:20 CST 2024 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/tcladvisory.asc Security Bulletin: AIX is vulnerable to arbitrary code execution CVE-2023-36328 due to tcl...

AIX is affected by multiple vulnerabilities due to Python

IBM SECURITY ADVISORY First Issued: Tue Nov 5 15:21:42 CST 2024 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/pythonadvisory13.asc Security Bulletin: AIX is affected by multiple vulnerabilities due to Python...

AIX is vulnerable to arbitrary command execution due to invscout (CVE-2024-27260)

IBM SECURITY ADVISORY First Issued: Wed May 15 17:28:09 CDT 2024 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/invscoutadvisory6.asc Security Bulletin: AIX is vulnerable to arbitrary command execution due to invscout CVE-2024-27260...

AIX is vulnerable to a denial of service due to NTP

IBM SECURITY ADVISORY First Issued: Thu Oct 5 10:43:28 CDT 2023 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/ntpadvisory14.asc Security Bulletin: AIX is vulnerable to a denial of service due to NTP CVE-2023-26551, CVE-2023-26552,...

AIX is vulnerable to a privilege escalation vulnerability due to invscout

IBM SECURITY ADVISORY First Issued: Mon Sep 12 14:58:31 CDT 2022 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/invscoutadvisory3.asc https://aix.software.ibm.com/aix/efixes/security/invscoutadvisory3.asc...