CVE-2022-43848 - IBM AIX denial of service

Back Back to CVE browser

MEDIUM

IBM AIX denial of service

Published Dec 23, 2022

6.2

MEDIUM

CVSS 3.1

EPSS 0.19%

Description

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX perfstat kernel extension to cause a denial of service. IBM X-Force ID: 239169.

Affected products

Vendor IBM Product AIX Default
unaffected
- Version
  7.1, 7.2, 7.3, VIOS 3.1
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

IBM

AIX

unaffected

Version	Status	Constraints
7.1, 7.2, 7.3, VIOS 3.1	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-46818
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/239169
vdb-entryVDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/6847947
vendor-advisoryPatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-46818		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/239169		vdb-entryVDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/6847947		vendor-advisoryPatchVendor Advisory