IBM AIX TCP Large Send Denial of Service Vulnerability

High Nessus Plugin ID 59917


The remote host is running a version of IBM AIX that is affected by a denial of service vulnerability.


The remote host is running a version of IBM AIX that could allow a remote attacker to cause a denial of service, due to an error when the TCP large send offload option is enabled on a network interface.
By sending a specially crafted sequence of packets, an attacker could exploit this vulnerability to cause a kernel panic.

Note that this plugin requires RFC 1323 to be enabled on the remote host.


Apply the fixes as described in the vendor's advisory.

See Also

Plugin Details

Severity: High

ID: 59917

File Name: aix_icmp_echo_reply_dos.nbin

Version: $Revision: 1.24 $

Type: remote

Family: General

Published: 2012/07/11

Modified: 2018/01/29

Dependencies: 11936

Risk Information

Risk Factor: High


Base Score: 7.8

Temporal Score: 5.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C

Temporal Vector: CVSS2#E:U/RL:OF/RC:C

Vulnerability Information

CPE: cpe:/o:ibm:aix

Exploit Available: false

Exploit Ease: No known exploits are available

Patch Publication Date: 2012/02/24

Vulnerability Publication Date: 2012/02/03

Reference Information

CVE: CVE-2012-0194

BID: 51864

OSVDB: 78887