Ibm Aix vulnerabilities

CVE-1999-0090 [HIGH] CVE-1999-0090: Buffer overflow in AIX rcp command allows local users to obtain root access. Buffer overflow in AIX rcp command allows local users to obtain root access.

CVE-1999-0338 [HIGH] CVE-1999-0338: AIX Licensed Program Product performance tools allow local users to gain root access. AIX Licensed Program Product performance tools allow local users to gain root access.

CVE-2022-43848 [MEDIUM] CWE-20 CVE-2022-43848: IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerabili IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX perfstat kernel extension to cause a denial of service. IBM X-Force ID: 239169.

CVE-2022-39165 [MEDIUM] CWE-400 CVE-2022-39165: IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerabilit IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in CAA to cause a denial of service. IBM X-Force ID: 235183.

CVE-2022-43849 [MEDIUM] CWE-20 CVE-2022-43849: IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerabilit IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in the AIX pfcdd kernel extension to cause a denial of service. IBM X-Force ID: 239170.

CVE-2022-43380 [MEDIUM] CWE-399 CVE-2022-43380: IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerabil IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX NFS kernel extension to cause a denial of service. IBM X-Force ID: 238640.

CVE-2022-43381 [MEDIUM] CWE-399 CVE-2022-43381: IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerabili IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in the AIX SMB client to cause a denial of service. IBM X-Force ID: 238639.

CVE-2016-8944 [MEDIUM] CWE-20 CVE-2016-8944: IBM AIX 7.1 and 7.2 allows a local user to open a file with a specially crafted argument that would IBM AIX 7.1 and 7.2 allows a local user to open a file with a specially crafted argument that would crash the system. IBM APARs: IV91488, IV91487, IV91456, IV90234.

CVE-2023-45172 [MEDIUM] CWE-20 CVE-2023-45172: IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in AIX windows to cause a denial of service. IBM X-Force ID: 267970.

CVE-2026-16980 [MEDIUM] CWE-59 CVE-2026-16980: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of serv IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to improper validation of symbolic links.

CVE-2026-18822 [MEDIUM] CWE-400 CVE-2026-18822: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of serv IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to uncontrolled resource consumption when parsing directory records.

CVE-2026-16952 [MEDIUM] CWE-400 CVE-2026-16952: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of serv IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to uncontrolled resource consumption.

CVE-2026-19653 [MEDIUM] CWE-400 CVE-2026-19653: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of serv IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to improper handling of memory page table configurations.

CVE-2026-17009 [MEDIUM] CWE-476 CVE-2026-17009: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of serv IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to a NULL pointer dereference.

CVE-1999-0093 [HIGH] CVE-1999-0093: AIX nslookup command allows local users to obtain root access by not dropping privileges correctly. AIX nslookup command allows local users to obtain root access by not dropping privileges correctly.

CVE-2005-3749 [HIGH] CVE-2005-3749: Unspecified "absolute path vulnerabilities" in the diagela command (diagela.sh) in IBM AIX 5.2 and 5 Unspecified "absolute path vulnerabilities" in the diagela command (diagela.sh) in IBM AIX 5.2 and 5.3 have unknown impact and attack vectors.

CVE-2003-0697 [HIGH] CVE-2003-0697: Format string vulnerability in lpd in the bos.rte.printers fileset for AIX 4.3 through 5.2, with deb Format string vulnerability in lpd in the bos.rte.printers fileset for AIX 4.3 through 5.2, with debug enabled, allows local users to cause a denial of service (crash) or gain root privileges.

CVE-1999-1589 [HIGH] CVE-1999-1589: Unspecified vulnerability in crontab in IBM AIX 3.2 allows local users to gain root privileges via u Unspecified vulnerability in crontab in IBM AIX 3.2 allows local users to gain root privileges via unknown attack vectors.

CVE-2020-4788 [MEDIUM] CVE-2020-4788: IBM Power9 (AIX 7.1, 7.2, and VIOS 3.1) processors could allow a local user to obtain sensitive info IBM Power9 (AIX 7.1, 7.2, and VIOS 3.1) processors could allow a local user to obtain sensitive information from the data in the L1 cache under extenuating circumstances. IBM X-Force ID: 189296.

CVE-2008-1274 [MEDIUM] CVE-2008-1274: Untrusted search path vulnerability in man in IBM AIX 6.1.0 allows local users to execute arbitrary Untrusted search path vulnerability in man in IBM AIX 6.1.0 allows local users to execute arbitrary code via a malicious program in the man directory.