CVE Daily – IBM AIX https://cvedaily.com/pages/tags/ibm-aix.html CVE Daily – IBM AIX en Wed, 03 Jun 2026 21:27:04 +0000 [Critical] CVE-2025-36251 – IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 nimsh service SSL/TLS implementat... https://nvd.nist.gov/vuln/detail/CVE-2025-36251 https://nvd.nist.gov/vuln/detail/CVE-2025-36251 Thu, 13 Nov 2025 22:15:51 +0000 Critical CVE-2025-36251

IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 nimsh service SSL/TLS implementations could allow a remote attacker to execute arbitrary commands due to improper process controls. This addresses additional attack vectors for a vulnerability that was previously addressed in CVE-2024-56347.

CVSS: 9.6 · CWE: CWE-114

View on NVD

]]> [Critical] CVE-2025-36250 – IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 NIM server (formerly known as NIM... https://nvd.nist.gov/vuln/detail/CVE-2025-36250 https://nvd.nist.gov/vuln/detail/CVE-2025-36250 Thu, 13 Nov 2025 22:15:50 +0000 Critical CVE-2025-36250

IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 NIM server (formerly known as NIM master) service (nimesis) could allow a remote attacker to execute arbitrary commands due to improper process controls.  This addresses additional attack vectors for a vulnerability that was previously addressed in CVE-2024-56346.

CVSS: 10.0 · CWE: CWE-114

View on NVD

]]> [High] CVE-2025-36236 – IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 NIM server (formerly known as NIM... https://nvd.nist.gov/vuln/detail/CVE-2025-36236 https://nvd.nist.gov/vuln/detail/CVE-2025-36236 Thu, 13 Nov 2025 22:15:50 +0000 High CVE-2025-36236

IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 NIM server (formerly known as NIM master) service (nimesis) could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request to write arbitrary files on the system.

CVSS: 8.2 · CWE: CWE-22

View on NVD

]]> [Critical] CVE-2025-36096 – IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 stores NIM private keys used in N... https://nvd.nist.gov/vuln/detail/CVE-2025-36096 https://nvd.nist.gov/vuln/detail/CVE-2025-36096 Thu, 13 Nov 2025 22:15:50 +0000 Critical CVE-2025-36096

IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 stores NIM private keys used in NIM environments in an insecure way which is susceptible to unauthorized access by an attacker using man in the middle techniques.

CVSS: 9.0 · CWE: CWE-522

View on NVD

]]> [High] CVE-2025-36244 – IBM AIX 7.2, 7.3, IBM VIOS 3.1, and 4.1, when configured to use Kerberos network... https://nvd.nist.gov/vuln/detail/CVE-2025-36244 https://nvd.nist.gov/vuln/detail/CVE-2025-36244 Tue, 16 Sep 2025 15:15:44 +0000 High CVE-2025-36244

IBM AIX 7.2, 7.3, IBM VIOS 3.1, and 4.1, when configured to use Kerberos network authentication, could allow a local user to write to files on the system with root privileges due to improper initialization of critical variables.

CVSS: 7.4 · CWE: CWE-454

View on NVD

]]> [High] CVE-2025-33112 – IBM AIX 7.3 and IBM VIOS 4.1.1 Perl implementation could allow a non-privileged ... https://nvd.nist.gov/vuln/detail/CVE-2025-33112 https://nvd.nist.gov/vuln/detail/CVE-2025-33112 Tue, 10 Jun 2025 17:23:11 +0000 High CVE-2025-33112

IBM AIX 7.3 and IBM VIOS 4.1.1 Perl implementation could allow a non-privileged local user to exploit a vulnerability to execute arbitrary code due to improper neutralization of pathname input.

CVSS: 8.4 · CWE: CWE-23

View on NVD

]]> [Critical] CVE-2024-56347 – IBM AIX 7.2 and 7.3 nimsh service SSL/TLS protection mechanisms could allow a re... https://nvd.nist.gov/vuln/detail/CVE-2024-56347 https://nvd.nist.gov/vuln/detail/CVE-2024-56347 Tue, 18 Mar 2025 17:15:44 +0000 Critical CVE-2024-56347

IBM AIX 7.2 and 7.3 nimsh service SSL/TLS protection mechanisms could allow a remote attacker to execute arbitrary commands due to improper process controls.

CVSS: 9.6 · CWE: CWE-114

View on NVD

]]> [Critical] CVE-2024-56346 – IBM AIX 7.2 and 7.3 nimesis NIM master service could allow a remote attacker to ... https://nvd.nist.gov/vuln/detail/CVE-2024-56346 https://nvd.nist.gov/vuln/detail/CVE-2024-56346 Tue, 18 Mar 2025 17:15:44 +0000 Critical CVE-2024-56346

IBM AIX 7.2 and 7.3 nimesis NIM master service could allow a remote attacker to execute arbitrary commands due to improper process controls.

CVSS: 10.0 · CWE: CWE-114

View on NVD

]]> [Medium] CVE-2024-52906 – IBM AIX 7.2, 7.3, VIOS 3.1, and 4.1 could allow a non-privileged local user t... https://nvd.nist.gov/vuln/detail/CVE-2024-52906 https://nvd.nist.gov/vuln/detail/CVE-2024-52906 Wed, 25 Dec 2024 15:15:07 +0000 Medium CVE-2024-52906

IBM AIX 7.2, 7.3, VIOS 3.1, and 4.1 could allow a non-privileged local user to exploit a vulnerability in the TCP/IP kernel extension to cause a denial of service.

CVSS: 5.5 · CWE: CWE-362

View on NVD

]]> [Medium] CVE-2024-47102 – IBM AIX 7.2, 7.3, VIOS 3.1, and 4.1 could allow a non-privileged local user to ... https://nvd.nist.gov/vuln/detail/CVE-2024-47102 https://nvd.nist.gov/vuln/detail/CVE-2024-47102 Wed, 25 Dec 2024 15:15:06 +0000 Medium CVE-2024-47102

IBM AIX 7.2, 7.3, VIOS 3.1, and 4.1 could allow a non-privileged local user to exploit a vulnerability in the AIX perfstat kernel extension to cause a denial of service.

CVSS: 5.5 · CWE: CWE-863

View on NVD

]]> [High] CVE-2024-47115 – IBM AIX 7.2, 7.3 and VIOS 3.1 and 4.1 could allow a local user to execute arbitr... https://nvd.nist.gov/vuln/detail/CVE-2024-47115 https://nvd.nist.gov/vuln/detail/CVE-2024-47115 Sat, 07 Dec 2024 13:19:14 +0000 High CVE-2024-47115

IBM AIX 7.2, 7.3 and VIOS 3.1 and 4.1 could allow a local user to execute arbitrary commands on the system due to improper neutralization of input.

CVSS: 7.8 · CWE: CWE-78

View on NVD

]]> [High] CVE-2024-27260 – IBM AIX could 7.2, 7.3, VIOS 3.1, and VIOS 4.1 allow a non-privileged local user... https://nvd.nist.gov/vuln/detail/CVE-2024-27260 https://nvd.nist.gov/vuln/detail/CVE-2024-27260 Thu, 16 May 2024 17:16:01 +0000 High CVE-2024-27260

IBM AIX could 7.2, 7.3, VIOS 3.1, and VIOS 4.1 allow a non-privileged local user to exploit a vulnerability in the invscout command to execute arbitrary commands. IBM X-Force ID: 283985.

CVSS: 8.4 · CWE: CWE-250

View on NVD

]]> [High] CVE-2024-27273 – IBM AIX's Unix domain (AIX 7.2, 7.3, VIOS 3.1, and VIOS 4.1) datagram socket imp... https://nvd.nist.gov/vuln/detail/CVE-2024-27273 https://nvd.nist.gov/vuln/detail/CVE-2024-27273 Tue, 07 May 2024 21:15:09 +0000 High CVE-2024-27273

IBM AIX's Unix domain (AIX 7.2, 7.3, VIOS 3.1, and VIOS 4.1) datagram socket implementation could potentially expose applications using Unix domain datagram sockets with SO_PEERID operation and may lead to privilege escalation. IBM X-Force ID: 284903.

CVSS: 8.1 · CWE: CWE-266

View on NVD

]]> [High] CVE-2024-25021 – IBM AIX 7.3, VIOS 4.1's Perl implementation could allow a non-privileged local u... https://nvd.nist.gov/vuln/detail/CVE-2024-25021 https://nvd.nist.gov/vuln/detail/CVE-2024-25021 Thu, 22 Feb 2024 12:15:46 +0000 High CVE-2024-25021

IBM AIX 7.3, VIOS 4.1's Perl implementation could allow a non-privileged local user to exploit a vulnerability to execute arbitrary commands. IBM X-Force ID: 281320.

CVSS: 8.4 · CWE: CWE-114

View on NVD

]]> [Medium] CVE-2023-45171 – IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploi... https://nvd.nist.gov/vuln/detail/CVE-2023-45171 https://nvd.nist.gov/vuln/detail/CVE-2023-45171 Thu, 11 Jan 2024 03:15:10 +0000 Medium CVE-2023-45171

IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the kernel to cause a denial of service. IBM X-Force ID: 267969.

CVSS: 6.2 · CWE: CWE-20

View on NVD

]]> [Medium] CVE-2023-45169 – IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploi... https://nvd.nist.gov/vuln/detail/CVE-2023-45169 https://nvd.nist.gov/vuln/detail/CVE-2023-45169 Thu, 11 Jan 2024 03:15:09 +0000 Medium CVE-2023-45169

IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the pmsvcs kernel extension to cause a denial of service. IBM X-Force ID: 267967.

CVSS: 6.2 · CWE: CWE-20

View on NVD

]]> [Medium] CVE-2023-45175 – IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploi... https://nvd.nist.gov/vuln/detail/CVE-2023-45175 https://nvd.nist.gov/vuln/detail/CVE-2023-45175 Thu, 11 Jan 2024 02:15:48 +0000 Medium CVE-2023-45175

IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the TCP/IP kernel extension to cause a denial of service. IBM X-Force ID: 267973.

CVSS: 6.2 · CWE: CWE-20

View on NVD

]]> [Medium] CVE-2023-45173 – IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploi... https://nvd.nist.gov/vuln/detail/CVE-2023-45173 https://nvd.nist.gov/vuln/detail/CVE-2023-45173 Thu, 11 Jan 2024 02:15:47 +0000 Medium CVE-2023-45173

IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the NFS kernel extension to cause a denial of service. IBM X-Force ID: 267971.

CVSS: 6.2 · CWE: CWE-20

View on NVD

]]> [Medium] CVE-2023-45165 – IBM AIX 7.2 and 7.3 could allow a non-privileged local user to exploit a vulnera... https://nvd.nist.gov/vuln/detail/CVE-2023-45165 https://nvd.nist.gov/vuln/detail/CVE-2023-45165 Fri, 22 Dec 2023 16:15:08 +0000 Medium CVE-2023-45165

IBM AIX 7.2 and 7.3 could allow a non-privileged local user to exploit a vulnerability in the AIX SMB client to cause a denial of service. IBM X-Force ID: 267963.

CVSS: 6.2 · CWE: CWE-20

View on NVD

]]> [Medium] CVE-2023-45172 – IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploi... https://nvd.nist.gov/vuln/detail/CVE-2023-45172 https://nvd.nist.gov/vuln/detail/CVE-2023-45172 Tue, 19 Dec 2023 23:15:07 +0000 Medium CVE-2023-45172

IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in AIX windows to cause a denial of service. IBM X-Force ID: 267970.

CVSS: 6.2 · CWE: CWE-20

View on NVD

]]> [High] CVE-2023-45174 – IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a privileged local user to exploit a ... https://nvd.nist.gov/vuln/detail/CVE-2023-45174 https://nvd.nist.gov/vuln/detail/CVE-2023-45174 Wed, 13 Dec 2023 23:15:08 +0000 High CVE-2023-45174

IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a privileged local user to exploit a vulnerability in the qdaemon command to escalate privileges or cause a denial of service. IBM X-Force ID: 267972.

CVSS: 8.4 · CWE: N/A

View on NVD

]]> [High] CVE-2023-45170 – IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploi... https://nvd.nist.gov/vuln/detail/CVE-2023-45170 https://nvd.nist.gov/vuln/detail/CVE-2023-45170 Wed, 13 Dec 2023 23:15:08 +0000 High CVE-2023-45170

IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the piobe command to escalate privileges or cause a denial of service. IBM X-Force ID: 267968.

CVSS: 8.4 · CWE: N/A

View on NVD

]]> [High] CVE-2023-45166 – IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploi... https://nvd.nist.gov/vuln/detail/CVE-2023-45166 https://nvd.nist.gov/vuln/detail/CVE-2023-45166 Wed, 13 Dec 2023 23:15:07 +0000 High CVE-2023-45166

IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the piodmgrsu command to obtain elevated privileges. IBM X-Force ID: 267964.

CVSS: 8.4 · CWE: N/A

View on NVD

]]> [High] CVE-2023-45168 – IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploi... https://nvd.nist.gov/vuln/detail/CVE-2023-45168 https://nvd.nist.gov/vuln/detail/CVE-2023-45168 Fri, 01 Dec 2023 15:15:07 +0000 High CVE-2023-45168

IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the invscout command to execute arbitrary commands. IBM X-Force ID: 267966.

CVSS: 8.4 · CWE: CWE-119

View on NVD

]]> [Medium] CVE-2023-45167 – IBM AIX's 7.3 Python implementation could allow a non-privileged local user to e... https://nvd.nist.gov/vuln/detail/CVE-2023-45167 https://nvd.nist.gov/vuln/detail/CVE-2023-45167 Fri, 10 Nov 2023 04:15:07 +0000 Medium CVE-2023-45167

IBM AIX's 7.3 Python implementation could allow a non-privileged local user to exploit a vulnerability to cause a denial of service. IBM X-Force ID: 267965.

CVSS: 6.2 · CWE: CWE-20

View on NVD

]]> [Medium] CVE-2023-40371 – IBM AIX 7.2, 7.3, VIOS 3.1's OpenSSH implementation could allow a non-privileged... https://nvd.nist.gov/vuln/detail/CVE-2023-40371 https://nvd.nist.gov/vuln/detail/CVE-2023-40371 Thu, 24 Aug 2023 14:15:10 +0000 Medium CVE-2023-40371

IBM AIX 7.2, 7.3, VIOS 3.1's OpenSSH implementation could allow a non-privileged local user to access files outside of those allowed due to improper access controls. IBM X-Force ID: 263476.

CVSS: 6.2 · CWE: CWE-327

View on NVD

]]> [High] CVE-2023-28528 – IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to e... https://nvd.nist.gov/vuln/detail/CVE-2023-28528 https://nvd.nist.gov/vuln/detail/CVE-2023-28528 Fri, 28 Apr 2023 03:15:08 +0000 High CVE-2023-28528

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the invscout command to execute arbitrary commands. IBM X-Force ID: 251207.

CVSS: 8.4 · CWE: CWE-78

View on NVD

]]> [High] CVE-2023-26286 – IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to e... https://nvd.nist.gov/vuln/detail/CVE-2023-26286 https://nvd.nist.gov/vuln/detail/CVE-2023-26286 Wed, 26 Apr 2023 12:15:09 +0000 High CVE-2023-26286

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX runtime services library to execute arbitrary commands. IBM X-Force ID: 248421.

CVSS: 8.4 · CWE: N/A

View on NVD

]]> [Medium] CVE-2022-47990 – IBM AIX 7.1, 7.2, 7.3 and VIOS , 3.1 could allow a non-privileged local user to ... https://nvd.nist.gov/vuln/detail/CVE-2022-47990 https://nvd.nist.gov/vuln/detail/CVE-2022-47990 Wed, 18 Jan 2023 19:15:11 +0000 Medium CVE-2022-47990

IBM AIX 7.1, 7.2, 7.3 and VIOS , 3.1 could allow a non-privileged local user to exploit a vulnerability in X11 to cause a buffer overflow that could result in a denial of service or arbitrary code execution. IBM X-Force ID: 243556.

CVSS: 6.2 · CWE: CWE-120

View on NVD

]]> [Medium] CVE-2022-43849 – IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to ex... https://nvd.nist.gov/vuln/detail/CVE-2022-43849 https://nvd.nist.gov/vuln/detail/CVE-2022-43849 Fri, 23 Dec 2022 20:15:20 +0000 Medium CVE-2022-43849

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in the AIX pfcdd kernel extension to cause a denial of service. IBM X-Force ID: 239170.

CVSS: 6.2 · CWE: CWE-20

View on NVD

]]> [Medium] CVE-2022-43848 – IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to e... https://nvd.nist.gov/vuln/detail/CVE-2022-43848 https://nvd.nist.gov/vuln/detail/CVE-2022-43848 Fri, 23 Dec 2022 20:15:20 +0000 Medium CVE-2022-43848

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX perfstat kernel extension to cause a denial of service. IBM X-Force ID: 239169.

CVSS: 6.2 · CWE: CWE-20

View on NVD

]]> [High] CVE-2022-41290 – IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to e... https://nvd.nist.gov/vuln/detail/CVE-2022-41290 https://nvd.nist.gov/vuln/detail/CVE-2022-41290 Fri, 23 Dec 2022 20:15:20 +0000 High CVE-2022-41290

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the rm_rlcache_file command to obtain root privileges. IBM X-Force ID: 236690.

CVSS: 8.4 · CWE: CWE-250

View on NVD

]]> [Medium] CVE-2022-39164 – IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to ex... https://nvd.nist.gov/vuln/detail/CVE-2022-39164 https://nvd.nist.gov/vuln/detail/CVE-2022-39164 Fri, 23 Dec 2022 20:15:20 +0000 Medium CVE-2022-39164

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to cause a denial of service. IBM X-Force ID: 235181.

CVSS: 6.2 · CWE: CWE-400

View on NVD

]]> [Medium] CVE-2022-43381 – IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to ex... https://nvd.nist.gov/vuln/detail/CVE-2022-43381 https://nvd.nist.gov/vuln/detail/CVE-2022-43381 Fri, 23 Dec 2022 19:15:10 +0000 Medium CVE-2022-43381

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in the AIX SMB client to cause a denial of service. IBM X-Force ID: 238639.

CVSS: 6.2 · CWE: CWE-399

View on NVD

]]> [Medium] CVE-2022-43380 – IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to e... https://nvd.nist.gov/vuln/detail/CVE-2022-43380 https://nvd.nist.gov/vuln/detail/CVE-2022-43380 Fri, 23 Dec 2022 19:15:10 +0000 Medium CVE-2022-43380

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX NFS kernel extension to cause a denial of service. IBM X-Force ID: 238640.

CVSS: 6.2 · CWE: CWE-399

View on NVD

]]> [Medium] CVE-2022-40233 – IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to e... https://nvd.nist.gov/vuln/detail/CVE-2022-40233 https://nvd.nist.gov/vuln/detail/CVE-2022-40233 Fri, 23 Dec 2022 19:15:10 +0000 Medium CVE-2022-40233

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX TCP/IP kernel extension to cause a denial of service. IBM X-Force ID: 235599.

CVSS: 6.2 · CWE: CWE-20

View on NVD

]]> [Medium] CVE-2022-39165 – IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to ex... https://nvd.nist.gov/vuln/detail/CVE-2022-39165 https://nvd.nist.gov/vuln/detail/CVE-2022-39165 Fri, 23 Dec 2022 19:15:09 +0000 Medium CVE-2022-39165

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in CAA to cause a denial of service. IBM X-Force ID: 235183.

CVSS: 6.2 · CWE: CWE-400

View on NVD

]]> [Medium] CVE-2022-43382 – IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a local user with elevated privil... https://nvd.nist.gov/vuln/detail/CVE-2022-43382 https://nvd.nist.gov/vuln/detail/CVE-2022-43382 Tue, 20 Dec 2022 21:15:11 +0000 Medium CVE-2022-43382

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a local user with elevated privileges to exploit a vulnerability in the lpd daemon to cause a denial of service. IBM X-Force ID: 238641.

CVSS: 6.2 · CWE: CWE-399

View on NVD

]]> [High] CVE-2022-36768 – IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to e... https://nvd.nist.gov/vuln/detail/CVE-2022-36768 https://nvd.nist.gov/vuln/detail/CVE-2022-36768 Tue, 13 Sep 2022 21:15:09 +0000 High CVE-2022-36768

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the invscout command to obtain root privileges. IBM X-Force ID: 232014.

CVSS: 7.8 · CWE: N/A

View on NVD

]]> [High] CVE-2022-34356 – IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to e... https://nvd.nist.gov/vuln/detail/CVE-2022-34356 https://nvd.nist.gov/vuln/detail/CVE-2022-34356 Tue, 13 Sep 2022 21:15:09 +0000 High CVE-2022-34356

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to obtain root privileges. IBM X-Force ID: 230502.

CVSS: 7.8 · CWE: N/A

View on NVD

]]> [Medium] CVE-2022-22444 – IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a local user to exploit a vulner... https://nvd.nist.gov/vuln/detail/CVE-2022-22444 https://nvd.nist.gov/vuln/detail/CVE-2022-22444 Wed, 15 Jun 2022 16:15:08 +0000 Medium CVE-2022-22444

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a local user to exploit a vulnerability in the lpd daemon to cause a denial of service. IBM X-Force ID: 224444.

CVSS: 5.5 · CWE: N/A

View on NVD

]]> [High] CVE-2022-22351 – IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged trusted host us... https://nvd.nist.gov/vuln/detail/CVE-2022-22351 https://nvd.nist.gov/vuln/detail/CVE-2022-22351 Mon, 07 Mar 2022 17:15:08 +0000 High CVE-2022-22351

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged trusted host user to exploit a vulnerability in the nimsh daemon to cause a denial of service in the nimsh daemon on another trusted host. IBM X-Force ID: 220396

CVSS: 8.6 · CWE: N/A

View on NVD

]]> [Medium] CVE-2021-38989 – IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to e... https://nvd.nist.gov/vuln/detail/CVE-2021-38989 https://nvd.nist.gov/vuln/detail/CVE-2021-38989 Mon, 07 Mar 2022 17:15:08 +0000 Medium CVE-2021-38989

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to cause a denial of service. IBM X-Force ID: 212951.

CVSS: 5.5 · CWE: N/A

View on NVD

]]> [Medium] CVE-2021-38988 – IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to e... https://nvd.nist.gov/vuln/detail/CVE-2021-38988 https://nvd.nist.gov/vuln/detail/CVE-2021-38988 Mon, 07 Mar 2022 17:15:07 +0000 Medium CVE-2021-38988

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to cause a denial of service. IBM X-Force ID: 212950.

CVSS: 5.5 · CWE: N/A

View on NVD

]]> [Medium] CVE-2022-22350 – IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to e... https://nvd.nist.gov/vuln/detail/CVE-2022-22350 https://nvd.nist.gov/vuln/detail/CVE-2022-22350 Wed, 02 Mar 2022 17:15:07 +0000 Medium CVE-2022-22350

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in CAA to cause a denial of service. IBM X-Force ID: 220394.

CVSS: 5.5 · CWE: N/A

View on NVD

]]> [Medium] CVE-2021-38996 – IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to e... https://nvd.nist.gov/vuln/detail/CVE-2021-38996 https://nvd.nist.gov/vuln/detail/CVE-2021-38996 Wed, 02 Mar 2022 17:15:07 +0000 Medium CVE-2021-38996

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to cause a denial of service. IBM X-Force ID: 213076.

CVSS: 5.5 · CWE: N/A

View on NVD

]]> [Medium] CVE-2021-38955 – IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a local user with elevated privi... https://nvd.nist.gov/vuln/detail/CVE-2021-38955 https://nvd.nist.gov/vuln/detail/CVE-2021-38955 Tue, 01 Mar 2022 17:15:07 +0000 Medium CVE-2021-38955

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a local user with elevated privileges to cause a denial of service due to a file creation vulnerability in the audit commands. IBM X-Force ID: 211825.

CVSS: 4.4 · CWE: N/A

View on NVD

]]> [Medium] CVE-2021-38993 – IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to e... https://nvd.nist.gov/vuln/detail/CVE-2021-38993 https://nvd.nist.gov/vuln/detail/CVE-2021-38993 Fri, 25 Feb 2022 18:15:07 +0000 Medium CVE-2021-38993

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the smbcd daemon to cause a denial of service. IBM X-Force ID: 212962.

CVSS: 5.5 · CWE: N/A

View on NVD

]]> [Medium] CVE-2021-38995 – IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to e... https://nvd.nist.gov/vuln/detail/CVE-2021-38995 https://nvd.nist.gov/vuln/detail/CVE-2021-38995 Thu, 24 Feb 2022 17:15:07 +0000 Medium CVE-2021-38995

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to cause a denial of service. IBM X-Force ID: 213073.

CVSS: 5.5 · CWE: N/A

View on NVD

]]> [Medium] CVE-2021-38994 – IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to e... https://nvd.nist.gov/vuln/detail/CVE-2021-38994 https://nvd.nist.gov/vuln/detail/CVE-2021-38994 Thu, 24 Feb 2022 17:15:07 +0000 Medium CVE-2021-38994

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to cause a denial of service. IBM X-Force ID: 213072.

CVSS: 5.5 · CWE: N/A

View on NVD

]]> [High] CVE-2021-38991 – IBM AIX 7.0, 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to e... https://nvd.nist.gov/vuln/detail/CVE-2021-38991 https://nvd.nist.gov/vuln/detail/CVE-2021-38991 Tue, 11 Jan 2022 17:15:07 +0000 High CVE-2021-38991

IBM AIX 7.0, 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the lscore command which could lead to code execution. IBM X-Force ID: 212953.

CVSS: 7.8 · CWE: N/A

View on NVD

]]> [High] CVE-2021-38990 – IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploi... https://nvd.nist.gov/vuln/detail/CVE-2021-38990 https://nvd.nist.gov/vuln/detail/CVE-2021-38990 Mon, 10 Jan 2022 14:10:20 +0000 High CVE-2021-38990

IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the mount command which could lead to code execution. IBM X-Force ID: 212952.

CVSS: 7.8 · CWE: N/A

View on NVD

]]> [Medium] CVE-2021-29861 – IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploi... https://nvd.nist.gov/vuln/detail/CVE-2021-29861 https://nvd.nist.gov/vuln/detail/CVE-2021-29861 Wed, 17 Nov 2021 14:15:08 +0000 Medium CVE-2021-29861

IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in EFS to expose sensitive information. IBM X-Force ID: 206085.

CVSS: 6.2 · CWE: N/A

View on NVD

]]> [Medium] CVE-2021-29860 – IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploi... https://nvd.nist.gov/vuln/detail/CVE-2021-29860 https://nvd.nist.gov/vuln/detail/CVE-2021-29860 Wed, 17 Nov 2021 14:15:07 +0000 Medium CVE-2021-29860

IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the libc.a library to expose sensitive information. IBM X-Force ID: 206084.

CVSS: 6.2 · CWE: N/A

View on NVD

]]> [Medium] CVE-2021-29862 – IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploi... https://nvd.nist.gov/vuln/detail/CVE-2021-29862 https://nvd.nist.gov/vuln/detail/CVE-2021-29862 Thu, 26 Aug 2021 20:15:07 +0000 Medium CVE-2021-29862

IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to cause a denial of service. IBM X-Force ID: 206086.

CVSS: 5.5 · CWE: N/A

View on NVD

]]> [High] CVE-2021-29801 – IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploi... https://nvd.nist.gov/vuln/detail/CVE-2021-29801 https://nvd.nist.gov/vuln/detail/CVE-2021-29801 Thu, 26 Aug 2021 20:15:07 +0000 High CVE-2021-29801

IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the kernel to gain root privileges. IBM X-Force ID: 203977.

CVSS: 7.8 · CWE: N/A

View on NVD

]]> [Medium] CVE-2021-29727 – IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a local user to exploit a vulnerabili... https://nvd.nist.gov/vuln/detail/CVE-2021-29727 https://nvd.nist.gov/vuln/detail/CVE-2021-29727 Thu, 26 Aug 2021 20:15:07 +0000 Medium CVE-2021-29727

IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a local user to exploit a vulnerability in the AIX kernel to cause a denial of service. IBM X-Force ID: 201106.

CVSS: 5.5 · CWE: N/A

View on NVD

]]> [High] CVE-2021-29741 – IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a local user to exploit a vulnerabili... https://nvd.nist.gov/vuln/detail/CVE-2021-29741 https://nvd.nist.gov/vuln/detail/CVE-2021-29741 Mon, 02 Aug 2021 15:15:08 +0000 High CVE-2021-29741

IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a local user to exploit a vulnerability in Korn Shell (ksh) to gain root privileges. IBM X-Force ID: 201478.

CVSS: 7.8 · CWE: N/A

View on NVD

]]> [Medium] CVE-2021-29693 – IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a local user that is in the with elev... https://nvd.nist.gov/vuln/detail/CVE-2021-29693 https://nvd.nist.gov/vuln/detail/CVE-2021-29693 Mon, 28 Jun 2021 16:15:08 +0000 Medium CVE-2021-29693

IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a local user that is in the with elevated group privileges to cause a denial of service due to a vulnerability in the lpd daemon. IBM X-Force ID: 200255.

CVSS: 4.4 · CWE: N/A

View on NVD

]]> [High] CVE-2021-29706 – IBM AIX 7.1 could allow a non-privileged local user to exploit a vulnerability i... https://nvd.nist.gov/vuln/detail/CVE-2021-29706 https://nvd.nist.gov/vuln/detail/CVE-2021-29706 Thu, 17 Jun 2021 16:15:07 +0000 High CVE-2021-29706

IBM AIX 7.1 could allow a non-privileged local user to exploit a vulnerability in the trace facility to expose sensitive information or cause a denial of service. IBM X-Force ID: 200663.

CVSS: 7.1 · CWE: N/A

View on NVD

]]> [Medium] CVE-2020-4887 – IBM AIX 7.1, 7.2 and AIX VIOS 3.1 could allow a local user to exploit a vulnerab... https://nvd.nist.gov/vuln/detail/CVE-2020-4887 https://nvd.nist.gov/vuln/detail/CVE-2020-4887 Wed, 20 Jan 2021 15:15:42 +0000 Medium CVE-2020-4887

IBM AIX 7.1, 7.2 and AIX VIOS 3.1 could allow a local user to exploit a vulnerability in the gencore user command to create arbitrary files in any directory. IBM X-Force ID: 190911.

CVSS: 5.5 · CWE: N/A

View on NVD

]]> [High] CVE-2020-4829 – IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a local user to exploit a vulnerabili... https://nvd.nist.gov/vuln/detail/CVE-2020-4829 https://nvd.nist.gov/vuln/detail/CVE-2020-4829 Thu, 10 Dec 2020 23:15:13 +0000 High CVE-2020-4829

IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a local user to exploit a vulnerability in the ksu user command to gain root privileges. IBM X-Force ID: 189960.

CVSS: 7.8 · CWE: N/A

View on NVD

]]> [Medium] CVE-2018-1655 – IBM AIX 5.3, 6.1, 7.1, and 7.2 contains a vulnerability in the rmsock command th... https://nvd.nist.gov/vuln/detail/CVE-2018-1655 https://nvd.nist.gov/vuln/detail/CVE-2018-1655 Fri, 22 Jun 2018 14:29:00 +0000 Medium CVE-2018-1655

IBM AIX 5.3, 6.1, 7.1, and 7.2 contains a vulnerability in the rmsock command that may be used to expose kernel memory. IBM X-Force ID: 144748.

CVSS: 4.0 · CWE: CWE-200

View on NVD

]]> [High] CVE-2017-1692 – IBM AIX 5.3, 6.1, 7.1, and 7.2 contains an unspecified vulnerability that would ... https://nvd.nist.gov/vuln/detail/CVE-2017-1692 https://nvd.nist.gov/vuln/detail/CVE-2017-1692 Wed, 07 Feb 2018 17:29:01 +0000 High CVE-2017-1692

IBM AIX 5.3, 6.1, 7.1, and 7.2 contains an unspecified vulnerability that would allow a locally authenticated user to obtain root level privileges. IBM X-Force ID: 134067.

CVSS: 7.8 · CWE: N/A

View on NVD

]]> [High] CVE-2016-8972 – IBM AIX 6.1, 7.1, and 7.2 could allow a local user to gain root privileges using... https://nvd.nist.gov/vuln/detail/CVE-2016-8972 https://nvd.nist.gov/vuln/detail/CVE-2016-8972 Wed, 15 Feb 2017 19:59:01 +0000 High CVE-2016-8972

IBM AIX 6.1, 7.1, and 7.2 could allow a local user to gain root privileges using a specially crafted command within the bellmail client. IBM APARs: IV91006, IV91007, IV91008, IV91010, IV91011.

CVSS: 7.8 · CWE: CWE-264

View on NVD

]]> [Medium] CVE-2016-8944 – IBM AIX 7.1 and 7.2 allows a local user to open a file with a specially crafted ... https://nvd.nist.gov/vuln/detail/CVE-2016-8944 https://nvd.nist.gov/vuln/detail/CVE-2016-8944 Wed, 15 Feb 2017 19:59:01 +0000 Medium CVE-2016-8944

IBM AIX 7.1 and 7.2 allows a local user to open a file with a specially crafted argument that would crash the system. IBM APARs: IV91488, IV91487, IV91456, IV90234.

CVSS: 5.5 · CWE: CWE-20

View on NVD

]]> [High] CVE-2016-6079 – IBM AIX 5.3, 6.1, 7.1, and 7.2 contains an unspecified vulnerability that would ... https://nvd.nist.gov/vuln/detail/CVE-2016-6079 https://nvd.nist.gov/vuln/detail/CVE-2016-6079 Wed, 15 Feb 2017 19:59:00 +0000 High CVE-2016-6079

IBM AIX 5.3, 6.1, 7.1, and 7.2 contains an unspecified vulnerability that would allow a locally authenticated user to obtain root level privileges. IBM APARs: IV88658, IV87981, IV88419, IV87640, IV88053.

CVSS: 7.8 · CWE: CWE-264

View on NVD

]]> [High] CVE-2017-1093 – IBM AIX 6.1, 7.1, and 7.2 could allow a local user to exploit a vulnerability in... https://nvd.nist.gov/vuln/detail/CVE-2017-1093 https://nvd.nist.gov/vuln/detail/CVE-2017-1093 Thu, 02 Feb 2017 22:59:00 +0000 High CVE-2017-1093

IBM AIX 6.1, 7.1, and 7.2 could allow a local user to exploit a vulnerability in the bellmail binary to gain root privileges.

CVSS: 7.8 · CWE: N/A

View on NVD

]]> [High] CVE-2016-3053 – IBM AIX contains an unspecified vulnerability that would allow a locally authent... https://nvd.nist.gov/vuln/detail/CVE-2016-3053 https://nvd.nist.gov/vuln/detail/CVE-2016-3053 Wed, 01 Feb 2017 20:59:00 +0000 High CVE-2016-3053

IBM AIX contains an unspecified vulnerability that would allow a locally authenticated user to obtain root level privileges.

CVSS: 7.8 · CWE: CWE-264

View on NVD

]]> [Low] CVE-2016-0281 – The mustendd driver in IBM AIX 5.3, 6.1, 7.1, and 7.2 and VIOS 2.2.x, when the j... https://nvd.nist.gov/vuln/detail/CVE-2016-0281 https://nvd.nist.gov/vuln/detail/CVE-2016-0281 Mon, 08 Aug 2016 01:59:02 +0000 Low CVE-2016-0281

The mustendd driver in IBM AIX 5.3, 6.1, 7.1, and 7.2 and VIOS 2.2.x, when the jumbo_frames feature is not enabled, allows remote attackers to cause a denial of service (FC1763 or FC5899 adapter crash) via crafted packets.

CVSS: 3.7 · CWE: CWE-20

View on NVD

]]> [Low] CVE-2016-0266 – IBM AIX 5.3, 6.1, 7.1, and 7.2 and VIOS 2.2.x do not default to the latest TLS v... https://nvd.nist.gov/vuln/detail/CVE-2016-0266 https://nvd.nist.gov/vuln/detail/CVE-2016-0266 Mon, 08 Aug 2016 01:59:00 +0000 Low CVE-2016-0266

IBM AIX 5.3, 6.1, 7.1, and 7.2 and VIOS 2.2.x do not default to the latest TLS version, which makes it easier for man-in-the-middle attackers to obtain sensitive information via unspecified vectors.

CVSS: 3.7 · CWE: CWE-254

View on NVD

]]> [Medium] CVE-2015-4948 – netstat in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x, when a fibre channel adapte... https://nvd.nist.gov/vuln/detail/CVE-2015-4948 https://nvd.nist.gov/vuln/detail/CVE-2015-4948 Fri, 16 Oct 2015 01:59:02 +0000 Medium CVE-2015-4948

netstat in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x, when a fibre channel adapter is used, allows local users to gain privileges via unspecified vectors.

CVSS: 6.9 · CWE: CWE-264

View on NVD

]]> [High] CVE-2014-8904 – lquerylv in cmdlvm in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x allows local user... https://nvd.nist.gov/vuln/detail/CVE-2014-8904 https://nvd.nist.gov/vuln/detail/CVE-2014-8904 Thu, 15 Jan 2015 22:59:03 +0000 High CVE-2014-8904

lquerylv in cmdlvm in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x allows local users to gain privileges via a crafted DBGCMD_LQUERYLV environment-variable value.

CVSS: 7.2 · CWE: CWE-264

View on NVD

]]> [High] CVE-2014-3074 – The runtime linker in IBM AIX 6.1 and 7.1 and VIOS 2.2.x allows local users to c... https://nvd.nist.gov/vuln/detail/CVE-2014-3074 https://nvd.nist.gov/vuln/detail/CVE-2014-3074 Wed, 02 Jul 2014 10:35:25 +0000 High CVE-2014-3074

The runtime linker in IBM AIX 6.1 and 7.1 and VIOS 2.2.x allows local users to create a mode-666 root-owned file, and consequently gain privileges, by setting crafted MALLOCOPTIONS and MALLOCBUCKETS environment-variable values and then executing a setuid program.

CVSS: 7.2 · CWE: CWE-264

View on NVD

]]> [Medium] CVE-2014-3977 – libodm.a in IBM AIX 6.1 and 7.1, and VIOS 2.2.x, allows local users to overwrite... https://nvd.nist.gov/vuln/detail/CVE-2014-3977 https://nvd.nist.gov/vuln/detail/CVE-2014-3977 Sun, 08 Jun 2014 23:55:04 +0000 Medium CVE-2014-3977

libodm.a in IBM AIX 6.1 and 7.1, and VIOS 2.2.x, allows local users to overwrite arbitrary files via a symlink attack on a temporary file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-2179.

CVSS: 6.9 · CWE: CWE-59

View on NVD

]]> [Medium] CVE-2014-0930 – The ptrace system call in IBM AIX 5.3, 6.1, and 7.1, and VIOS 2.2.x, allows loca... https://nvd.nist.gov/vuln/detail/CVE-2014-0930 https://nvd.nist.gov/vuln/detail/CVE-2014-0930 Thu, 08 May 2014 10:55:03 +0000 Medium CVE-2014-0930

The ptrace system call in IBM AIX 5.3, 6.1, and 7.1, and VIOS 2.2.x, allows local users to cause a denial of service (system crash) or obtain sensitive information from kernel memory via a crafted PT_LDINFO operation.

CVSS: 4.7 · CWE: N/A

View on NVD

]]> [Medium] CVE-2014-0899 – ftpd in IBM AIX 7.1.1 before SP10 and 7.1.2 before SP5, when a Workload Partitio... https://nvd.nist.gov/vuln/detail/CVE-2014-0899 https://nvd.nist.gov/vuln/detail/CVE-2014-0899 Tue, 11 Mar 2014 13:01:09 +0000 Medium CVE-2014-0899

ftpd in IBM AIX 7.1.1 before SP10 and 7.1.2 before SP5, when a Workload Partition (aka WPAR) for AIX 5.2 or 5.3 is used, allows remote authenticated users to bypass intended permission settings and modify arbitrary files via FTP commands.

CVSS: 6.5 · CWE: CWE-264

View on NVD

]]> [Medium] CVE-2013-5419 – Multiple buffer overflows in (1) mkque and (2) mkquedev in bos.rte.printers in I... https://nvd.nist.gov/vuln/detail/CVE-2013-5419 https://nvd.nist.gov/vuln/detail/CVE-2013-5419 Fri, 04 Oct 2013 10:44:07 +0000 Medium CVE-2013-5419

Multiple buffer overflows in (1) mkque and (2) mkquedev in bos.rte.printers in IBM AIX 6.1 and 7.1 allow local users to gain privileges by leveraging printq group membership.

CVSS: 6.9 · CWE: CWE-119

View on NVD

]]> [High] CVE-2013-4011 – Multiple unspecified vulnerabilities in the InfiniBand subsystem in IBM AIX 6.1 ... https://nvd.nist.gov/vuln/detail/CVE-2013-4011 https://nvd.nist.gov/vuln/detail/CVE-2013-4011 Thu, 18 Jul 2013 16:51:55 +0000 High CVE-2013-4011

Multiple unspecified vulnerabilities in the InfiniBand subsystem in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, allow local users to gain privileges via vectors involving (1) arp.ib or (2) ibstat.

CVSS: 7.2 · CWE: N/A

View on NVD

]]> [High] CVE-2013-3005 – The TFTP client in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, when RBAC ... https://nvd.nist.gov/vuln/detail/CVE-2013-3005 https://nvd.nist.gov/vuln/detail/CVE-2013-3005 Sat, 06 Jul 2013 13:57:36 +0000 High CVE-2013-3005

The TFTP client in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, when RBAC is enabled, allows remote authenticated users to bypass intended file-ownership restrictions, and read or overwrite arbitrary files, via unspecified vectors.

CVSS: 8.5 · CWE: CWE-264

View on NVD

]]> [High] CVE-2013-3035 – The IPv6 implementation in the inet subsystem in IBM AIX 6.1 and 7.1, and VIOS 2... https://nvd.nist.gov/vuln/detail/CVE-2013-3035 https://nvd.nist.gov/vuln/detail/CVE-2013-3035 Fri, 21 Jun 2013 14:55:01 +0000 High CVE-2013-3035

The IPv6 implementation in the inet subsystem in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, allows remote attackers to cause a denial of service (system hang) via a crafted packet to an IPv6 interface.

CVSS: 7.1 · CWE: CWE-20

View on NVD

]]> [Medium] CVE-2012-4845 – The FTP client in IBM AIX 6.1 and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, does not pr... https://nvd.nist.gov/vuln/detail/CVE-2012-4845 https://nvd.nist.gov/vuln/detail/CVE-2012-4845 Sat, 20 Oct 2012 10:41:27 +0000 Medium CVE-2012-4845

The FTP client in IBM AIX 6.1 and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, does not properly manage privileges in an RBAC environment, which allows attackers to bypass intended file-read restrictions by leveraging the setuid installation of the ftp executable file.

CVSS: 6.8 · CWE: CWE-264

View on NVD

]]> [Low] CVE-2012-4833 – fuser in IBM AIX 6.1 and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, does not properly re... https://nvd.nist.gov/vuln/detail/CVE-2012-4833 https://nvd.nist.gov/vuln/detail/CVE-2012-4833 Mon, 01 Oct 2012 18:55:01 +0000 Low CVE-2012-4833

fuser in IBM AIX 6.1 and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, does not properly restrict the -k option, which allows local users to kill arbitrary processes via a crafted command line.

CVSS: 2.1 · CWE: CWE-264

View on NVD

]]> [Medium] CVE-2012-4817 – The NFSv4 client implementation in IBM AIX 5.3, 6.1, and 7.1, and VIOS before 2... https://nvd.nist.gov/vuln/detail/CVE-2012-4817 https://nvd.nist.gov/vuln/detail/CVE-2012-4817 Fri, 14 Sep 2012 23:55:15 +0000 Medium CVE-2012-4817

The NFSv4 client implementation in IBM AIX 5.3, 6.1, and 7.1, and VIOS before 2.2.1.4-FP-25 SP-02, does not properly handle GID values, which allows remote attackers to cause a denial of service via unspecified vectors.

CVSS: 5.0 · CWE: N/A

View on NVD

]]> [Medium] CVE-2012-0723 – The kernel in IBM AIX 5.3, 6.1, and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, does not ... https://nvd.nist.gov/vuln/detail/CVE-2012-0723 https://nvd.nist.gov/vuln/detail/CVE-2012-0723 Mon, 30 Jul 2012 19:55:01 +0000 Medium CVE-2012-0723

The kernel in IBM AIX 5.3, 6.1, and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, does not properly implement the dupmsg system call, which allows local users to cause a denial of service (system crash) via a crafted application.

CVSS: 4.9 · CWE: CWE-20

View on NVD

]]> [High] CVE-2012-2200 – The default configuration of sendmail in IBM AIX 6.1 and 7.1, and VIOS 2.2.1.4-F... https://nvd.nist.gov/vuln/detail/CVE-2012-2200 https://nvd.nist.gov/vuln/detail/CVE-2012-2200 Wed, 27 Jun 2012 10:18:37 +0000 High CVE-2012-2200

The default configuration of sendmail in IBM AIX 6.1 and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, allows local users to gain privileges by entering a command in a .forward file in a home directory.

CVSS: 7.2 · CWE: CWE-264

View on NVD

]]> [Medium] CVE-2012-2179 – libodm.a in IBM AIX 5.3, 6.1, and 7.1 allows local users to overwrite arbitrary ... https://nvd.nist.gov/vuln/detail/CVE-2012-2179 https://nvd.nist.gov/vuln/detail/CVE-2012-2179 Fri, 22 Jun 2012 10:24:07 +0000 Medium CVE-2012-2179

libodm.a in IBM AIX 5.3, 6.1, and 7.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary file.

CVSS: 6.9 · CWE: CWE-264

View on NVD

]]> [Medium] CVE-2012-2192 – The socketpair function in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.1.4-FP-25 SP-0... https://nvd.nist.gov/vuln/detail/CVE-2012-2192 https://nvd.nist.gov/vuln/detail/CVE-2012-2192 Wed, 20 Jun 2012 10:27:28 +0000 Medium CVE-2012-2192

The socketpair function in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.1.4-FP-25 SP-02 allows local users to cause a denial of service (system crash) via a crafted application that leverages the presence of a socket on the free list.

CVSS: 4.9 · CWE: CWE-399

View on NVD

]]> [High] CVE-2012-0745 – The getpwnam function in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.1.0.10 through 2.2... https://nvd.nist.gov/vuln/detail/CVE-2012-0745 https://nvd.nist.gov/vuln/detail/CVE-2012-0745 Fri, 04 May 2012 16:55:01 +0000 High CVE-2012-0745

The getpwnam function in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.1.0.10 through 2.2.1.3 does not properly interact with customer-extended LDAP user filtering, which allows local users to gain privileges via unspecified vectors.

CVSS: 7.2 · CWE: CWE-264

View on NVD

]]> [High] CVE-2011-1385 – IBM AIX 5.3, 6.1, and 7.1, and VIOS 2.1.x and 2.2.x, allows remote attackers to ... https://nvd.nist.gov/vuln/detail/CVE-2011-1385 https://nvd.nist.gov/vuln/detail/CVE-2011-1385 Fri, 02 Mar 2012 22:55:01 +0000 High CVE-2011-1385

IBM AIX 5.3, 6.1, and 7.1, and VIOS 2.1.x and 2.2.x, allows remote attackers to cause a denial of service (system crash) via an ICMP Echo Reply packet that contains 1 in the Identifier field, a different vulnerability than CVE-2012-0194.

CVSS: 7.8 · CWE: CWE-399

View on NVD

]]> [High] CVE-2012-0194 – The TCP implementation in IBM AIX 5.3, 6.1, and 7.1, when the Large Send Offload... https://nvd.nist.gov/vuln/detail/CVE-2012-0194 https://nvd.nist.gov/vuln/detail/CVE-2012-0194 Mon, 06 Feb 2012 20:55:02 +0000 High CVE-2012-0194

The TCP implementation in IBM AIX 5.3, 6.1, and 7.1, when the Large Send Offload option is enabled, allows remote attackers to cause a denial of service (assertion failure and panic) via an unspecified series of packets.

CVSS: 7.1 · CWE: N/A

View on NVD

]]> [Medium] CVE-2011-1384 – The (1) bin/invscoutClient_VPD_Survey and (2) sbin/invscout_lsvpd programs in in... https://nvd.nist.gov/vuln/detail/CVE-2011-1384 https://nvd.nist.gov/vuln/detail/CVE-2011-1384 Wed, 04 Jan 2012 03:55:04 +0000 Medium CVE-2011-1384

The (1) bin/invscoutClient_VPD_Survey and (2) sbin/invscout_lsvpd programs in invscout.rte before 2.2.0.19 on IBM AIX 7.1, 6.1, 5.3, and earlier allow local users to delete arbitrary files, or trigger inventory scout operations on arbitrary files, via a symlink attack on an unspecified file.

CVSS: 4.0 · CWE: CWE-59

View on NVD

]]> [Medium] CVE-2011-1375 – IBM AIX 6.1 and 7.1 does not restrict the wpar_limits_config and wpar_limits_mod... https://nvd.nist.gov/vuln/detail/CVE-2011-1375 https://nvd.nist.gov/vuln/detail/CVE-2011-1375 Fri, 11 Nov 2011 21:55:00 +0000 Medium CVE-2011-1375

IBM AIX 6.1 and 7.1 does not restrict the wpar_limits_config and wpar_limits_modify system calls, which allows local users to cause a denial of service (system crash) via a crafted call.

CVSS: 4.9 · CWE: CWE-264

View on NVD

]]> [Low] CVE-2011-3982 – The Fibre Channel driver for QLogic adapters in IBM AIX 6.1 and 7.1 does not pro... https://nvd.nist.gov/vuln/detail/CVE-2011-3982 https://nvd.nist.gov/vuln/detail/CVE-2011-3982 Wed, 05 Oct 2011 02:56:24 +0000 Low CVE-2011-3982

The Fibre Channel driver for QLogic adapters in IBM AIX 6.1 and 7.1 does not properly handle DMA resource limitations, which allows local users to cause a denial of service (system hang) via vectors that generate a large amount of DMA I/O, related to a deadlock in timer processing across CPUs.

CVSS: 2.1 · CWE: CWE-399

View on NVD

]]> [Medium] CVE-2011-1561 – The LDAP login feature in bos.rte.security 6.1.6.4 in IBM AIX 6.1, when ldap_aut... https://nvd.nist.gov/vuln/detail/CVE-2011-1561 https://nvd.nist.gov/vuln/detail/CVE-2011-1561 Tue, 05 Apr 2011 15:19:35 +0000 Medium CVE-2011-1561

The LDAP login feature in bos.rte.security 6.1.6.4 in IBM AIX 6.1, when ldap_auth is enabled in ldap.cfg, allows remote attackers to bypass authentication via a login attempt with an arbitrary password.

CVSS: 6.8 · CWE: CWE-287

View on NVD

]]> [Medium] CVE-2011-0637 – The FC SCSI protocol driver in IBM AIX 6.1 does not verify that a timer is unuse... https://nvd.nist.gov/vuln/detail/CVE-2011-0637 https://nvd.nist.gov/vuln/detail/CVE-2011-0637 Tue, 25 Jan 2011 01:00:02 +0000 Medium CVE-2011-0637

The FC SCSI protocol driver in IBM AIX 6.1 does not verify that a timer is unused before deallocating this timer, which might allow attackers to cause a denial of service (system crash) via unspecified vectors.

CVSS: 4.9 · CWE: N/A

View on NVD

]]> [Low] CVE-2010-3406 – Unspecified vulnerability in sa_snap in the bos.esagent fileset in IBM AIX 5.3 a... https://nvd.nist.gov/vuln/detail/CVE-2010-3406 https://nvd.nist.gov/vuln/detail/CVE-2010-3406 Thu, 16 Sep 2010 21:00:01 +0000 Low CVE-2010-3406

Unspecified vulnerability in sa_snap in the bos.esagent fileset in IBM AIX 5.3 allows local users to leverage system group membership and delete files via unknown vectors.

CVSS: 1.7 · CWE: N/A

View on NVD

]]> [Medium] CVE-2010-3405 – Buffer overflow in sa_snap in the bos.esagent fileset in IBM AIX 6.1, 5.3, and e... https://nvd.nist.gov/vuln/detail/CVE-2010-3405 https://nvd.nist.gov/vuln/detail/CVE-2010-3405 Thu, 16 Sep 2010 21:00:01 +0000 Medium CVE-2010-3405

Buffer overflow in sa_snap in the bos.esagent fileset in IBM AIX 6.1, 5.3, and earlier and VIOS 2.1, 1.5, and earlier allows local users to leverage system group membership and gain privileges via unspecified vectors.

CVSS: 6.8 · CWE: CWE-119

View on NVD

]]> [Critical] CVE-2010-3187 – Buffer overflow in ftpd in IBM AIX 5.3 and earlier allows remote attackers to ex... https://nvd.nist.gov/vuln/detail/CVE-2010-3187 https://nvd.nist.gov/vuln/detail/CVE-2010-3187 Mon, 30 Aug 2010 20:00:04 +0000 Critical CVE-2010-3187

Buffer overflow in ftpd in IBM AIX 5.3 and earlier allows remote attackers to execute arbitrary code via a long NLST command.

CVSS: 10.0 · CWE: CWE-119

View on NVD

]]> [Critical] CVE-2010-1039 – Format string vulnerability in the _msgout function in rpc.pcnfsd in IBM AIX 6.1... https://nvd.nist.gov/vuln/detail/CVE-2010-1039 https://nvd.nist.gov/vuln/detail/CVE-2010-1039 Thu, 20 May 2010 17:30:01 +0000 Critical CVE-2010-1039

Format string vulnerability in the _msgout function in rpc.pcnfsd in IBM AIX 6.1, 5.3, and earlier; IBM VIOS 2.1, 1.5, and earlier; NFS/ONCplus B.11.31_09 and earlier on HP HP-UX B.11.11, B.11.23, and B.11.31; and SGI IRIX 6.5 allows remote attackers to execute arbitrary code via an RPC request containing format string specifiers in an invalid directory name.

CVSS: 10.0 · CWE: CWE-134

View on NVD

]]>