CVE-2024-27273 - IBM AIX privilege escalation

Back Back to CVE browser

HIGH

IBM AIX privilege escalation

Published May 7, 2024

8.1

HIGH

CVSS 3.1

EPSS 0.15%

Description

IBM AIX's Unix domain (AIX 7.2, 7.3, VIOS 3.1, and VIOS 4.1) datagram socket implementation could potentially expose applications using Unix domain datagram sockets with SO_PEERID operation and may lead to privilege escalation. IBM X-Force ID: 284903.

Affected products

Vendor IBM Product AIX Default
unaffected
- Version
  7.2, 7.3, VIOS 3.1, VIOS 4.1
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

IBM

AIX

unaffected

Version	Status	Constraints
7.2, 7.3, VIOS 3.1, VIOS 4.1	affected	-

Vendor IBM Product Aix Default
n/a
- Version
  3.1
  Status
  affected
  Constraints
  -
- Version
  4.1
  Status
  affected
  Constraints
  -
- Version
  7.2
  Status
  affected
  Constraints
  -
- Version
  7.3
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

IBM

Aix

n/a

Version	Status	Constraints
3.1	affected	-
4.1	affected	-
7.2	affected	-
7.3	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-266

Incorrect Privilege Assignment

References (2)

https://exchange.xforce.ibmcloud.com/vulnerabilities/284903
vdb-entryVendor Advisory
https://www.ibm.com/support/pages/node/7150297
vendor-advisoryVendor Advisory

Link	Providers	Tags
https://exchange.xforce.ibmcloud.com/vulnerabilities/284903		vdb-entryVendor Advisory
https://www.ibm.com/support/pages/node/7150297		vendor-advisoryVendor Advisory