The version of Java SDK installed on the remote AIX host is affected by multiple vulnerabilities in the following subcomponents :

  - A flaw exists in Libraries that allows an unauthenticated, remote    attacker to cause denial of service. (CVE-2019-2602)

  - A flaw exists in the RMI component that allows an unauthenticated,     remote attacker to cause unspecified integrity impact.
    (CVE-2019-2684)

  - Flaws exist in the 2D component that allows an unauthenticated,     remote attacker to take control of the system via unspecified     means. (CVE-2019-2697, CVE-2019-2698)

  - A flaw exists in Eclipse OpenJ9 that allows an unauthenticated,     remote attacker to cause denial of service. (CVE-2019-10245)

The version of OpenSSL installed on the remote AIX host is affected by a side channel attack information disclosure vulnerability.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19519 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19519 Tcpdump is vulnerable to a stack-based buffer overflow, caused by improper bounds checking by the print_prefix function of print-hncp.c. By using a specially-crafted packet data, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14665 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14665 X.Org X server could allow a remote authenticated attacker to gain elevated privileges on the system, caused by improper validation of command line parameters. An attacker could exploit this vulnerability using the -modulepath argument or the -logfile argument to overwrite arbitrary files and execute unprivileged code on the system.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3623 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3623 An unspecified vulnerability in Oracle Sun Systems related to the Solaris Kernel RPC component could allow an unauthenticated attacker to take control of the system.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6922 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6922 FreeBSD is vulnerable to a denial of service, caused by the use of an inefficient TCP reassembly algorithm. By sending specially-crafted TCP traffic, a remote attacker could exploit this vulnerability to consume all available CPU resources.

The version of restbyinode installed on the remote AIX host is affected by a privilege escalation vulnerability. A local attacker can exploit this to gain root privileges.

The version of lquerypv installed on the remote AIX host is affected by a privilege escalation vulnerability. A local attacker can exploit this to gain root privileges.

The version of bos_acct installed on the remote AIX host is affected by a privilege escalation vulnerability. A local attacker can exploit this to gain root privileges.

The version of bellmail installed on the remote AIX host is affected by a privilege escalation vulnerability. A local attacker can exploit this to gain root privileges.

The version of OpenSSL installed on the remote AIX host is affected by a denial of service vulnerability.

The version of the rmsock command installed on the remote AIX host is affected by an information disclosure vulnerability. An unauthenticated, local attacker can exploit this and potentially expose kernel memory.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3639 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3639

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3956 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3956 The sm_close_on_exec function in conf.c in sendmail before 8.14.9 has arguments in the wrong order, and consequently skips setting expected FD_CLOEXEC flags, which allows local users to access unintended high-numbered file descriptors via a custom mail-delivery program.

ID	Name	Severity
126924	AIX Java Advisory : java_apr2019_advisory.asc (April 2019 CPU)	Medium
125708	AIX OpenSSL Advisory : openssl_advisory30.asc	Medium
125707	AIX OpenSSL Advisory : openssl_advisory29.asc	Medium
122429	AIX 7.2 TL 3 : tcpdump (IJ12983)	Medium
122428	AIX 7.2 TL 2 : tcpdump (IJ12982)	Medium
122427	AIX 7.2 TL 1 : tcpdump (IJ12981)	Medium
122426	AIX 7.1 TL 5 : tcpdump (IJ12980)	Medium
122425	AIX 7.1 TL 4 : tcpdump (IJ12979)	Medium
119633	AIX 5.3 TL 12 : xorg (IJ11551)	High
119632	AIX 7.2 TL 3 : xorg (IJ11550)	High
119631	AIX 7.2 TL 2 : xorg (IJ11549)	High
119630	AIX 7.2 TL 1 : xorg (IJ11547)	High
119629	AIX 7.2 TL 0 : xorg (IJ11546)	High
119628	AIX 7.1 TL 5 : xorg (IJ11545)	High
119627	AIX 7.1 TL 4 : xorg (IJ11544)	High
119626	AIX 6.1 TL 9 : xorg (IJ11000)	High
119625	AIX 5.3 TL 12 : solaris (IJ10554)	Critical
119624	AIX 7.2 TL 0 : solaris (IJ10553)	Critical
119623	AIX 7.2 TL 1 : solaris (IJ10552)	Critical
119622	AIX 7.1 TL 4 : solaris (IJ10275)	Critical
119621	AIX 6.1 TL 9 : solaris (IJ10134)	Critical
119620	AIX 7.1 TL 5 : solaris (IJ10132)	Critical
119619	AIX 7.2 TL 2 : solaris (IJ10130)	Critical
119618	AIX 7.2 TL 3 : solaris (IJ09805)	Critical
118831	AIX 7.2 TL 3 : freebsd (IJ09625)	Medium
118830	AIX 7.2 TL 2 : freebsd (IJ09624)	Medium
118829	AIX 7.2 TL 1 : freebsd (IJ09623)	Medium
118828	AIX 7.2 TL 0 : freebsd (IJ09622)	Medium
118827	AIX 7.1 TL 5 : freebsd (IJ09621)	Medium
118826	AIX 7.1 TL 4 : freebsd (IJ09620)	Medium
118825	AIX 6.1 TL 9 : freebsd (IJ09619)	Medium
118824	AIX 5.3 TL 12 : freebsd (IJ09618)	Medium
111972	AIX restbyinode Advisory : suid_advisory.asc (IV97852) (IV97957) (IV97958) (IV97959) (IV98013)	High
111971	AIX lquerypv Advisory : suid_advisory.asc (IJ00951) (IV99548) (IV99550) (IV99551) (IV99552)	High
111970	AIX bos.acct Advisory : suid_advisory.asc (IV97810) (IV97811) (IV97896) (IV97897) (IV97898) (IV97899) (IV97900) (IV97901)	High
111969	AIX bellmail Advisory : suid_advisory.asc (IV97356) (IV99497) (IV99498) (IV99499)	High
111354	AIX OpenSSL Advisory : openssl_advisory27.asc	Medium
111353	AIX OpenSSL Advisory : openssl_advisory26.asc	Medium
110777	AIX rmsock Advisory : rmsock_advisory2.asc (IJ06904) (IJ06905) (IJ06906) (IJ06907) (IJ06908) (IJ06934) (IJ06935)	Low
109957	AIX 5.3 TL 12 : variant4 (IJ05826) (Spectre)	Medium
109956	AIX 6.1 TL 9 : variant4 (IJ05824) (Spectre)	Medium
109955	AIX 7.1 TL 4 : variant4 (IJ05823) (Spectre)	Medium
109954	AIX 7.1 TL 5 : variant4 (IJ05822) (Spectre)	Medium
109953	AIX 7.2 TL 0 : variant4 (IJ05821) (Spectre)	Medium
109952	AIX 7.2 TL 1 : variant4 (IJ05820) (Spectre)	Medium
109951	AIX 7.2 TL 2 : variant4 (IJ05818) (Spectre)	Medium
108897	AIX 5.3 TL 12 : sendmail (IJ03273)	Low
108896	AIX 7.1 TL 5 : sendmail (IJ03121)	Low
108895	AIX 7.2 TL 2 : sendmail (IJ02920)	Low
108894	AIX 7.2 TL 1 : sendmail (IJ02919)	Low

AIX Local Security Checks Family for Nessus