CVE-2022-43380 - IBM AIX denial of service

Back Back to CVE browser

MEDIUM

IBM AIX denial of service

Published Dec 23, 2022

6.2

MEDIUM

CVSS 3.1

EPSS 0.19%

Description

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX NFS kernel extension to cause a denial of service. IBM X-Force ID: 238640.

Affected products

Vendor IBM Product AIX Default
unaffected
- Version
  7.1, 7.2, 7.3, VIOS 3.1
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

IBM

AIX

unaffected

Version	Status	Constraints
7.1, 7.2, 7.3, VIOS 3.1	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-399

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-46419
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/238640
vdb-entryVDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/6847947
vendor-advisoryPatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-46419		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/238640		vdb-entryVDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/6847947		vendor-advisoryPatchVendor Advisory