Skip to content
OpenAdvisories
High WID-SEC-2022-2335 7 CVEs

IBM AIX: Mehrere Schwachstellen

Published Dec 14, 2022 · Updated Feb 19, 2023 · Revision 3 · de-DE

Vendor: IBM Product: AIX Product: AIX 7.1 Product: AIX 7.2 Product: AIX 7.3 Product: VIOS 3.1

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in IBM AIX und IBM VIOS ausnutzen, um einen Denial of Service Angriff durchzuführen und seine Privilegien zu erweitern.

Product

AIX ist ein Unix Betriebssystem von IBM.
IBM Virtual I/O Server (VIOS) bietet Virtualisierungsfunktionen.

Vulnerabilities 7

  • High 8.4
    CVE-2022-41290

    IBM AIX privilege escalation

    IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the rm_rlcache_file command to obtain root privileges. IBM X-Force ID: 236690.

    IBM AIX
  • Medium 6.2
    CVE-2022-39164

    IBM AIX denial of service

    IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to cause a denial of service. IBM X-Force ID: 235181.

    IBM AIX
  • Medium 6.2
    CVE-2022-39165

    IBM AIX denial of service

    IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in CAA to cause a denial of service. IBM X-Force ID: 235183.

    IBM AIX
  • Medium 6.2
    CVE-2022-40233

    IBM AIX denial of service

    IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX TCP/IP kernel extension to cause a denial of service. IBM X-Force ID: 235599.

    IBM AIX
  • Medium 6.2
    CVE-2022-43380

    IBM AIX denial of service

    IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX NFS kernel extension to cause a denial of service. IBM X-Force ID: 238640.

    IBM AIX
  • Medium 6.2
    CVE-2022-43848

    IBM AIX denial of service

    IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX perfstat kernel extension to cause a denial of service. IBM X-Force ID: 239169.

    IBM AIX
  • Medium 6.2
    CVE-2022-43849

    IBM AIX denial of service

    IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in the AIX pfcdd kernel extension to cause a denial of service. IBM X-Force ID: 239170.

    IBM AIX

Revision history

  1. #3

    Neue Updates von IBM aufgenommen

  2. #2

    Neue Updates von IBM und IBM-APAR aufgenommen

  3. #1

    Initiale Fassung

References