Multiple vulnerabilities in IBM AIX and VIOS
| Risk | Low |
| Patch available | YES |
| Number of vulnerabilities | 3 |
| CVE-ID | CVE-2021-38955 CVE-2022-22350 CVE-2021-38996 |
| CWE-ID | CWE-20 |
| Exploitation vector | Local |
| Public exploit | N/A |
| Vulnerable software |
IBM AIX Operating systems & Components / Operating system IBM VIOS Server applications / Application servers |
| Vendor | IBM Corporation |
Security Bulletin
This security bulletin contains information about 3 vulnerabilities.
Updated 02.03.2022
Added vulnerabilities #2-3
1) Input validation error
EUVDB-ID: #VU60916
Risk: Low
CVSSv4.0: 4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2021-38955
CWE-ID:
CWE-20 - Improper input validation
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to a file creation issue in the AIX audit user commands. A local administrator can pass specially crafted input to the application and perform a denial of service (DoS) attack.
MitigationInstall updates from vendor's website.
Vulnerable software versionsIBM AIX: 7.1 - 7.3
IBM VIOS: 3.1.0
CPE2.3- cpe:2.3:o:ibm_corporation:ibm_aix:7.1:*:*:*:*:*:*:*
- cpe:2.3:o:ibm_corporation:ibm_aix:7.2:*:*:*:*:*:*:*
- cpe:2.3:o:ibm_corporation:ibm_aix:7.3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm_corporation:ibm_vios:3.1.0:*:*:*:*:*:*:*
https://aix.software.ibm.com/aix/efixes/security/audit_advisory.asc
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
2) Input validation error
EUVDB-ID: #VU60946
Risk: Low
CVSSv4.0: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2022-22350
CWE-ID:
CWE-20 - Improper input validation
Exploit availability: No
DescriptionThe vulnerability allows a local attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to insufficient validation of user-supplied input in CAA. A local attacker can pass specially crafted input to the application and perform a denial of service (DoS) attack.
MitigationInstall updates from vendor's website.
Vulnerable software versionsIBM AIX: 7.1 - 7.3
IBM VIOS: 3.1.0
CPE2.3- cpe:2.3:o:ibm_corporation:ibm_aix:7.1:*:*:*:*:*:*:*
- cpe:2.3:o:ibm_corporation:ibm_aix:7.2:*:*:*:*:*:*:*
- cpe:2.3:o:ibm_corporation:ibm_aix:7.3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm_corporation:ibm_vios:3.1.0:*:*:*:*:*:*:*
https://www.ibm.com/support/pages/node/6560390
https://aix.software.ibm.com/aix/efixes/security/caa_advisory2.asc
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
3) Input validation error
EUVDB-ID: #VU60947
Risk: Low
CVSSv4.0: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2021-38996
CWE-ID:
CWE-20 - Improper input validation
Exploit availability: No
DescriptionThe vulnerability allows a local attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to insufficient validation of user-supplied input in the AIX kernel. A local attacker can pass specially crafted input to the application and perform a denial of service (DoS) attack.
MitigationInstall updates from vendor's website.
Vulnerable software versionsIBM AIX: 7.1 - 7.3
IBM VIOS: 3.1.0
CPE2.3- cpe:2.3:o:ibm_corporation:ibm_aix:7.1:*:*:*:*:*:*:*
- cpe:2.3:o:ibm_corporation:ibm_aix:7.2:*:*:*:*:*:*:*
- cpe:2.3:o:ibm_corporation:ibm_aix:7.3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm_corporation:ibm_vios:3.1.0:*:*:*:*:*:*:*
https://www.ibm.com/support/pages/node/6560390
https://aix.software.ibm.com/aix/efixes/security/caa_advisory2.asc
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
