CVE-2008-5386 — Improper Restriction of Operations within the Bounds of a Memory Buffer in IBM AIX

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer3 documents3 sources
Severity
6.9MEDIUMNVD
EPSS
0.1%
top 84.23%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM AIX
Timeline
PublishedDec 9
Latest updateMay 17

Description

Buffer overflow in ndp in IBM AIX 6.1.0 through 6.1.2, when the netcd daemon is running, allows local users to gain privileges via unspecified vectors.

CVSS vector

AV:L/AC:M/C:C/I:C/A:CExploitability: 3.4 | Impact: 10.0

Affected Packages1 packages

▶NVDibm/aix6.1, 6.1.1, 6.1.2+2

Patches

Patch: www-01.ibm.com ↗Patch: www-01.ibm.com ↗Patch: www-01.ibm.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-4h57-478m-rf25: Buffer overflow in ndp in IBM AIX 6↗2022-05-17
▶
CVEList
CVE-2008-5386: Buffer overflow in ndp in IBM AIX 6↗2008-12-09
▶
CVE-2008-5386 — IBM AIX vulnerability | cvebase