CVE-2008-0586 — Improper Restriction of Operations within the Bounds of a Memory Buffer in IBM AIX

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer3 documents3 sources
Severity
7.2HIGHNVD
EPSS
0.1%
top 82.72%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM AIX
Timeline
PublishedFeb 5
Latest updateMay 1

Description

Multiple buffer overflows in IBM AIX 5.2 and 5.3 allow local users to gain privileges via unspecified vectors related to the (1) lchangevg, (2) ldeletepv, (3) putlvodm, (4) lvaryoffvg, and (5) lvgenminor programs in bos.rte.lvm; and the (6) tellclvmd program in bos.clvm.enh.

CVSS vector

AV:L/AC:L/C:C/I:C/A:CExploitability: 3.9 | Impact: 10.0

Affected Packages1 packages

▶NVDibm/aix5.2, 5.3+1

🔴Vulnerability Details

2
GHSA
GHSA-j26g-5fx3-gg9m: Multiple buffer overflows in IBM AIX 5↗2022-05-01
▶
CVEList
CVE-2008-0586: Multiple buffer overflows in IBM AIX 5↗2008-02-05
▶
CVE-2008-0586 — IBM AIX vulnerability | cvebase