http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25220 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25220 ISC BIND could allow a remote attacker to bypass security restrictions, caused by an error when using DNS forwarders. An attacker could exploit this vulnerability to poison the cache with incorrect records leading to queries being made to the wrong servers, which might also result in false information being returned to clients.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34356 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34356 IBM AIX could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to obtain root privileges.

The version of AIX installed on the remote host is prior to APAR IJ43073. It is, therefore, affected by a vulnerability as referenced in the IJ43073 advisory.

  - IBM AIX 7.1, 7.2, 7.3 and VIOS , 3.1 could allow a non-privileged local user to exploit a vulnerability in     X11 to cause a buffer overflow that could result in a denial of service or arbitrary code execution. IBM     X-Force ID: 243556. (CVE-2022-47990)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ42939. It is, therefore, affected by a vulnerability as referenced in the IJ42939 advisory.

  - IBM AIX 7.1, 7.2, 7.3 and VIOS , 3.1 could allow a non-privileged local user to exploit a vulnerability in     X11 to cause a buffer overflow that could result in a denial of service or arbitrary code execution. IBM     X-Force ID: 243556. (CVE-2022-47990)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ42677. It is, therefore, affected by a vulnerability as referenced in the IJ42677 advisory.

  - IBM AIX 7.1, 7.2, 7.3 and VIOS , 3.1 could allow a non-privileged local user to exploit a vulnerability in     X11 to cause a buffer overflow that could result in a denial of service or arbitrary code execution. IBM     X-Force ID: 243556. (CVE-2022-47990)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38178 ISC BIND is vulnerable to a denial of service, caused by a memory leak in the DNSSEC verification code for the EdDSA algorithm. By spoofing the target resolver with responses that have a malformed EdDSA signature, a remote attacker could exploit this vulnerability to cause named to crash. ISC BIND is vulnerable to a denial of service, caused by an error when stale cache and stale answers are enabled, option stale-answer-client-timeout is set to 0 and there is a stale CNAME in the cache for an incoming query. By sending a specially-crafted request, a remote attacker could exploit this vulnerability to cause named to crash. ISC BIND is vulnerable to a denial of service, caused by a small memory leak in the DNSSEC verification code for the ECDSA algorithm. By spoofing the target resolver with responses that have a malformed ECDSA signature, a remote attacker could exploit this vulnerability to cause named to crash. ISC BIND is vulnerable to a denial of service, caused by a flaw in resolver code. By flooding the target resolver with queries, a remote attacker could exploit this vulnerability to severely degrade the resolver's performance, effectively denying legitimate clients access to the DNS resolution service.

The version of AIX installed on the remote host is prior to APAR IJ44564. It is, therefore, affected by a vulnerability as referenced in the IJ44564 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a local user with elevated privileges to exploit a     vulnerability in the lpd daemon to cause a denial of service. IBM X-Force ID: 238641. (CVE-2022-43382)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ44559. It is, therefore, affected by a vulnerability as referenced in the IJ44559 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a local user with elevated privileges to exploit a     vulnerability in the lpd daemon to cause a denial of service. IBM X-Force ID: 238641. (CVE-2022-43382)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ44552. It is, therefore, affected by a vulnerability as referenced in the IJ44552 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a local user with elevated privileges to exploit a     vulnerability in the lpd daemon to cause a denial of service. IBM X-Force ID: 238641. (CVE-2022-43382)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ42800. It is, therefore, affected by a vulnerability as referenced in the IJ42800 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a local user with elevated privileges to exploit a     vulnerability in the lpd daemon to cause a denial of service. IBM X-Force ID: 238641. (CVE-2022-43382)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ44594. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ44594 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX NFS kernel extension to cause a denial of service. IBM X-Force ID: 238640. (CVE-2022-43380)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX TCP/IP kernel extension to cause a denial of service. IBM X-Force ID: 235599. (CVE-2022-40233)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     CAA to cause a denial of service. IBM X-Force ID: 235183. (CVE-2022-39165)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX perfstat kernel extension to cause a denial of service. IBM X-Force ID: 239169. (CVE-2022-43848)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX pfcdd kernel extension to cause a denial of service. IBM X-Force ID: 239170. (CVE-2022-43849)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 235181. (CVE-2022-39164)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ43893. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ43893 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX NFS kernel extension to cause a denial of service. IBM X-Force ID: 238640. (CVE-2022-43380)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX TCP/IP kernel extension to cause a denial of service. IBM X-Force ID: 235599. (CVE-2022-40233)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     CAA to cause a denial of service. IBM X-Force ID: 235183. (CVE-2022-39165)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX perfstat kernel extension to cause a denial of service. IBM X-Force ID: 239169. (CVE-2022-43848)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX pfcdd kernel extension to cause a denial of service. IBM X-Force ID: 239170. (CVE-2022-43849)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 235181. (CVE-2022-39164)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ43875. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ43875 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX NFS kernel extension to cause a denial of service. IBM X-Force ID: 238640. (CVE-2022-43380)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX TCP/IP kernel extension to cause a denial of service. IBM X-Force ID: 235599. (CVE-2022-40233)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     CAA to cause a denial of service. IBM X-Force ID: 235183. (CVE-2022-39165)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX perfstat kernel extension to cause a denial of service. IBM X-Force ID: 239169. (CVE-2022-43848)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX pfcdd kernel extension to cause a denial of service. IBM X-Force ID: 239170. (CVE-2022-43849)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 235181. (CVE-2022-39164)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-39164 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-39164 IBM AIX could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to obtain root privileges. IBM AIX could allow a non-privileged local user to exploit a vulnerability in the AIX NFS kernel extension to cause a denial of service. IBM AIX could allow a non-privileged local user to exploit a vulnerability in the AIX TCP/IP kernel extension to cause a denial of service. IBM AIX could allow a non-privileged local user to exploit a vulnerability in CAA to cause a denial of service. IBM AIX could allow a non-privileged local user to exploit a vulnerability in the AIX perfstat kernel extension to cause a denial of service. IBM AIX could allow a non-privileged local user to exploit a vulnerability in the AIX pfcdd kernel extension to cause a denial of service.

The version of AIX installed on the remote host is prior to APAR IJ42937. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ42937 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX NFS kernel extension to cause a denial of service. IBM X-Force ID: 238640. (CVE-2022-43380)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX TCP/IP kernel extension to cause a denial of service. IBM X-Force ID: 235599. (CVE-2022-40233)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     CAA to cause a denial of service. IBM X-Force ID: 235183. (CVE-2022-39165)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX perfstat kernel extension to cause a denial of service. IBM X-Force ID: 239169. (CVE-2022-43848)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX pfcdd kernel extension to cause a denial of service. IBM X-Force ID: 239170. (CVE-2022-43849)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 235181. (CVE-2022-39164)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ43967. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ43967 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX NFS kernel extension to cause a denial of service. IBM X-Force ID: 238640. (CVE-2022-43380)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX TCP/IP kernel extension to cause a denial of service. IBM X-Force ID: 235599. (CVE-2022-40233)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     CAA to cause a denial of service. IBM X-Force ID: 235183. (CVE-2022-39165)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX perfstat kernel extension to cause a denial of service. IBM X-Force ID: 239169. (CVE-2022-43848)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX pfcdd kernel extension to cause a denial of service. IBM X-Force ID: 239170. (CVE-2022-43849)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 235181. (CVE-2022-39164)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ42938. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ42938 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX NFS kernel extension to cause a denial of service. IBM X-Force ID: 238640. (CVE-2022-43380)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX TCP/IP kernel extension to cause a denial of service. IBM X-Force ID: 235599. (CVE-2022-40233)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     CAA to cause a denial of service. IBM X-Force ID: 235183. (CVE-2022-39165)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX perfstat kernel extension to cause a denial of service. IBM X-Force ID: 239169. (CVE-2022-43848)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX pfcdd kernel extension to cause a denial of service. IBM X-Force ID: 239170. (CVE-2022-43849)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 235181. (CVE-2022-39164)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ43098. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ43098 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX NFS kernel extension to cause a denial of service. IBM X-Force ID: 238640. (CVE-2022-43380)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX TCP/IP kernel extension to cause a denial of service. IBM X-Force ID: 235599. (CVE-2022-40233)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     CAA to cause a denial of service. IBM X-Force ID: 235183. (CVE-2022-39165)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX perfstat kernel extension to cause a denial of service. IBM X-Force ID: 239169. (CVE-2022-43848)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX pfcdd kernel extension to cause a denial of service. IBM X-Force ID: 239170. (CVE-2022-43849)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 235181. (CVE-2022-39164)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ42163. It is, therefore, affected by a vulnerability as referenced in the IJ42163 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the rm_rlcache_file command to obtain root privileges. IBM X-Force ID: 236690. (CVE-2022-41290)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ42230. It is, therefore, affected by a vulnerability as referenced in the IJ42230 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the rm_rlcache_file command to obtain root privileges. IBM X-Force ID: 236690. (CVE-2022-41290)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ43877. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ43877 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX NFS kernel extension to cause a denial of service. IBM X-Force ID: 238640. (CVE-2022-43380)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX TCP/IP kernel extension to cause a denial of service. IBM X-Force ID: 235599. (CVE-2022-40233)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     CAA to cause a denial of service. IBM X-Force ID: 235183. (CVE-2022-39165)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX perfstat kernel extension to cause a denial of service. IBM X-Force ID: 239169. (CVE-2022-43848)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX pfcdd kernel extension to cause a denial of service. IBM X-Force ID: 239170. (CVE-2022-43849)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 235181. (CVE-2022-39164)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ42159. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ42159 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX NFS kernel extension to cause a denial of service. IBM X-Force ID: 238640. (CVE-2022-43380)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX TCP/IP kernel extension to cause a denial of service. IBM X-Force ID: 235599. (CVE-2022-40233)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     CAA to cause a denial of service. IBM X-Force ID: 235183. (CVE-2022-39165)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX perfstat kernel extension to cause a denial of service. IBM X-Force ID: 239169. (CVE-2022-43848)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX pfcdd kernel extension to cause a denial of service. IBM X-Force ID: 239170. (CVE-2022-43849)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 235181. (CVE-2022-39164)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ42234. It is, therefore, affected by a vulnerability as referenced in the IJ42234 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the rm_rlcache_file command to obtain root privileges. IBM X-Force ID: 236690. (CVE-2022-41290)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ41975. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ41975 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX NFS kernel extension to cause a denial of service. IBM X-Force ID: 238640. (CVE-2022-43380)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX TCP/IP kernel extension to cause a denial of service. IBM X-Force ID: 235599. (CVE-2022-40233)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     CAA to cause a denial of service. IBM X-Force ID: 235183. (CVE-2022-39165)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX perfstat kernel extension to cause a denial of service. IBM X-Force ID: 239169. (CVE-2022-43848)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX pfcdd kernel extension to cause a denial of service. IBM X-Force ID: 239170. (CVE-2022-43849)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 235181. (CVE-2022-39164)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ43099. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ43099 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX NFS kernel extension to cause a denial of service. IBM X-Force ID: 238640. (CVE-2022-43380)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX TCP/IP kernel extension to cause a denial of service. IBM X-Force ID: 235599. (CVE-2022-40233)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     CAA to cause a denial of service. IBM X-Force ID: 235183. (CVE-2022-39165)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX perfstat kernel extension to cause a denial of service. IBM X-Force ID: 239169. (CVE-2022-43848)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX pfcdd kernel extension to cause a denial of service. IBM X-Force ID: 239170. (CVE-2022-43849)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 235181. (CVE-2022-39164)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ41974. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ41974 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX NFS kernel extension to cause a denial of service. IBM X-Force ID: 238640. (CVE-2022-43380)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX TCP/IP kernel extension to cause a denial of service. IBM X-Force ID: 235599. (CVE-2022-40233)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     CAA to cause a denial of service. IBM X-Force ID: 235183. (CVE-2022-39165)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX perfstat kernel extension to cause a denial of service. IBM X-Force ID: 239169. (CVE-2022-43848)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX pfcdd kernel extension to cause a denial of service. IBM X-Force ID: 239170. (CVE-2022-43849)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 235181. (CVE-2022-39164)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ43468. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ43468 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX NFS kernel extension to cause a denial of service. IBM X-Force ID: 238640. (CVE-2022-43380)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX TCP/IP kernel extension to cause a denial of service. IBM X-Force ID: 235599. (CVE-2022-40233)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     CAA to cause a denial of service. IBM X-Force ID: 235183. (CVE-2022-39165)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX perfstat kernel extension to cause a denial of service. IBM X-Force ID: 239169. (CVE-2022-43848)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX pfcdd kernel extension to cause a denial of service. IBM X-Force ID: 239170. (CVE-2022-43849)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 235181. (CVE-2022-39164)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ43072. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ43072 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX NFS kernel extension to cause a denial of service. IBM X-Force ID: 238640. (CVE-2022-43380)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX TCP/IP kernel extension to cause a denial of service. IBM X-Force ID: 235599. (CVE-2022-40233)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     CAA to cause a denial of service. IBM X-Force ID: 235183. (CVE-2022-39165)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX perfstat kernel extension to cause a denial of service. IBM X-Force ID: 239169. (CVE-2022-43848)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX pfcdd kernel extension to cause a denial of service. IBM X-Force ID: 239170. (CVE-2022-43849)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 235181. (CVE-2022-39164)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ43970. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ43970 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX NFS kernel extension to cause a denial of service. IBM X-Force ID: 238640. (CVE-2022-43380)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX TCP/IP kernel extension to cause a denial of service. IBM X-Force ID: 235599. (CVE-2022-40233)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     CAA to cause a denial of service. IBM X-Force ID: 235183. (CVE-2022-39165)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX perfstat kernel extension to cause a denial of service. IBM X-Force ID: 239169. (CVE-2022-43848)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX pfcdd kernel extension to cause a denial of service. IBM X-Force ID: 239170. (CVE-2022-43849)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 235181. (CVE-2022-39164)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ43980. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ43980 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX NFS kernel extension to cause a denial of service. IBM X-Force ID: 238640. (CVE-2022-43380)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX TCP/IP kernel extension to cause a denial of service. IBM X-Force ID: 235599. (CVE-2022-40233)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     CAA to cause a denial of service. IBM X-Force ID: 235183. (CVE-2022-39165)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX perfstat kernel extension to cause a denial of service. IBM X-Force ID: 239169. (CVE-2022-43848)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX pfcdd kernel extension to cause a denial of service. IBM X-Force ID: 239170. (CVE-2022-43849)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 235181. (CVE-2022-39164)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ43876. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ43876 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX NFS kernel extension to cause a denial of service. IBM X-Force ID: 238640. (CVE-2022-43380)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX TCP/IP kernel extension to cause a denial of service. IBM X-Force ID: 235599. (CVE-2022-40233)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     CAA to cause a denial of service. IBM X-Force ID: 235183. (CVE-2022-39165)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX perfstat kernel extension to cause a denial of service. IBM X-Force ID: 239169. (CVE-2022-43848)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX pfcdd kernel extension to cause a denial of service. IBM X-Force ID: 239170. (CVE-2022-43849)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 235181. (CVE-2022-39164)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ43891. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ43891 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX NFS kernel extension to cause a denial of service. IBM X-Force ID: 238640. (CVE-2022-43380)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX TCP/IP kernel extension to cause a denial of service. IBM X-Force ID: 235599. (CVE-2022-40233)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     CAA to cause a denial of service. IBM X-Force ID: 235183. (CVE-2022-39165)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX perfstat kernel extension to cause a denial of service. IBM X-Force ID: 239169. (CVE-2022-43848)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX pfcdd kernel extension to cause a denial of service. IBM X-Force ID: 239170. (CVE-2022-43849)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 235181. (CVE-2022-39164)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ44595. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ44595 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX NFS kernel extension to cause a denial of service. IBM X-Force ID: 238640. (CVE-2022-43380)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX TCP/IP kernel extension to cause a denial of service. IBM X-Force ID: 235599. (CVE-2022-40233)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     CAA to cause a denial of service. IBM X-Force ID: 235183. (CVE-2022-39165)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX perfstat kernel extension to cause a denial of service. IBM X-Force ID: 239169. (CVE-2022-43848)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX pfcdd kernel extension to cause a denial of service. IBM X-Force ID: 239170. (CVE-2022-43849)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 235181. (CVE-2022-39164)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29824 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29824 GNOME libxml2 is vulnerable to a denial of service, caused by an integer overflows in several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*). By persuading a victim to open a specially-crafted XML file, a remote attacker could exploit this vulnerability to cause a denial of service condition.

ID	Name	Severity
173299	AIX 7.2 TL 4 : bind (IJ40616)	medium
173298	AIX 7.2 TL 5 : bind (IJ40615)	medium
173297	AIX 7.1 TL 5 : bind (IJ40617)	medium
173296	AIX 7.3 TL 0 : bind (IJ40614)	medium
173247	AIX 7.3 TL 0 : kernel (IJ41687)	high
173246	AIX 7.2 TL 5 : kernel (IJ41795)	high
173245	AIX 7.1 TL 5 : kernel (IJ41688)	high
173244	AIX 7.2 TL 5 : kernel (IJ41685)	high
173243	AIX 7.2 TL 4 : kernel (IJ41706)	high
170125	AIX (IJ43073)	high
170124	AIX (IJ42939)	high
170123	AIX (IJ42677)	high
169317	AIX 7.2 TL 5 : bind (IJ44425)	high
169316	AIX 7.1 TL 5 : bind (IJ44422)	high
169315	AIX 7.3 TL 0 : bind (IJ44427)	high
168865	AIX (IJ44564)	medium
168864	AIX (IJ44559)	medium
168863	AIX (IJ44552)	medium
168862	AIX (IJ42800)	medium
168777	AIX : Multiple Vulnerabilities (IJ44594)	medium
168776	AIX : Multiple Vulnerabilities (IJ43893)	medium
168775	AIX : Multiple Vulnerabilities (IJ43875)	medium
168774	AIX 7.2 TL 5 : kernel (IJ44116)	medium
168773	AIX 7.2 TL 5 : kernel (IJ43869)	medium
168772	AIX : Multiple Vulnerabilities (IJ42937)	medium
168771	AIX 7.2 TL 5 : kernel (IJ44115)	medium
168770	AIX : Multiple Vulnerabilities (IJ43967)	medium
168769	AIX : Multiple Vulnerabilities (IJ42938)	medium
168768	AIX : Multiple Vulnerabilities (IJ43098)	medium
168767	AIX 7.2 TL 5 : kernel (IJ44114)	medium
168766	AIX 7.2 TL 5 : kernel (IJ43598)	medium
168765	AIX (IJ42163)	high
168764	AIX (IJ42230)	high
168763	AIX : Multiple Vulnerabilities (IJ43877)	medium
168762	AIX : Multiple Vulnerabilities (IJ42159)	medium
168761	AIX (IJ42234)	high
168760	AIX : Multiple Vulnerabilities (IJ41975)	medium
168759	AIX : Multiple Vulnerabilities (IJ43099)	medium
168758	AIX 7.2 TL 5 : kernel (IJ43674)	medium
168757	AIX : Multiple Vulnerabilities (IJ41974)	medium
168756	AIX : Multiple Vulnerabilities (IJ43468)	medium
168755	AIX : Multiple Vulnerabilities (IJ43072)	medium
168754	AIX : Multiple Vulnerabilities (IJ43970)	medium
168753	AIX : Multiple Vulnerabilities (IJ43980)	medium
168752	AIX : Multiple Vulnerabilities (IJ43876)	medium
168751	AIX : Multiple Vulnerabilities (IJ43891)	medium
168750	AIX : Multiple Vulnerabilities (IJ44595)	medium
165285	AIX 7.3 TL 0 : libxml2 (IJ42341)	medium
165284	AIX 7.2 TL 4 : libxml2 (IJ42381)	medium
165283	AIX 7.2 TL 5 : libxml2 (IJ42339)	medium

Detections

Analytics

AIX Local Security Checks Family for Nessus

medium

medium

medium

medium

high

high

high

high

high

high

high

high

high

high

high

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

high

high

medium

medium

high

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium