The version of AIX installed on the remote host is prior to APAR IJ57162. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ57162 advisory.

  - A flaw was identified in the X.Org X server's X Keyboard (Xkb) extension where improper bounds checking in     the XkbSetCompatMap() function can cause an unsigned short overflow. If an attacker sends specially     crafted input data, the value calculation may overflow, leading to memory corruption or a crash.
    (CVE-2025-62231)

  - A flaw was discovered in the X.Org X server's X Keyboard (Xkb) extension when handling client resource     cleanup. The software frees certain data structures without properly detaching related resources, leading     to a use-after-free condition. This can cause memory corruption or a crash when affected clients     disconnect. (CVE-2025-62230)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ57128. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ57128 advisory.

  - A flaw was identified in the X.Org X server's X Keyboard (Xkb) extension where improper bounds checking in     the XkbSetCompatMap() function can cause an unsigned short overflow. If an attacker sends specially     crafted input data, the value calculation may overflow, leading to memory corruption or a crash.
    (CVE-2025-62231)

  - A flaw was discovered in the X.Org X server's X Keyboard (Xkb) extension when handling client resource     cleanup. The software frees certain data structures without properly detaching related resources, leading     to a use-after-free condition. This can cause memory corruption or a crash when affected clients     disconnect. (CVE-2025-62230)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ57232. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ57232 advisory.

  - A flaw was identified in the X.Org X server's X Keyboard (Xkb) extension where improper bounds checking in     the XkbSetCompatMap() function can cause an unsigned short overflow. If an attacker sends specially     crafted input data, the value calculation may overflow, leading to memory corruption or a crash.
    (CVE-2025-62231)

  - A flaw was discovered in the X.Org X server's X Keyboard (Xkb) extension when handling client resource     cleanup. The software frees certain data structures without properly detaching related resources, leading     to a use-after-free condition. This can cause memory corruption or a crash when affected clients     disconnect. (CVE-2025-62230)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ57292. It is, therefore, affected by a vulnerability as referenced in the IJ57292 advisory.

  - A vulnerability was found in libxml2 up to 2.14.5. It has been declared as problematic. This vulnerability     affects the function xmlParseSGMLCatalog of the component xmlcatalog. The manipulation leads to     uncontrolled recursion. Attacking locally is a requirement. The exploit has been disclosed to the public     and may be used. The real existence of this vulnerability is still doubted at the moment. The code     maintainer explains, that [t]he issue can only be triggered with untrusted SGML catalogs and it makes     absolutely no sense to use untrusted catalogs. I also doubt that anyone is still using SGML catalogs at     all. (CVE-2025-8732)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ57276. It is, therefore, affected by a vulnerability as referenced in the IJ57276 advisory.

  - A vulnerability was found in libxml2 up to 2.14.5. It has been declared as problematic. This vulnerability     affects the function xmlParseSGMLCatalog of the component xmlcatalog. The manipulation leads to     uncontrolled recursion. Attacking locally is a requirement. The exploit has been disclosed to the public     and may be used. The real existence of this vulnerability is still doubted at the moment. The code     maintainer explains, that [t]he issue can only be triggered with untrusted SGML catalogs and it makes     absolutely no sense to use untrusted catalogs. I also doubt that anyone is still using SGML catalogs at     all. (CVE-2025-8732)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ57291. It is, therefore, affected by a vulnerability as referenced in the IJ57291 advisory.

  - A vulnerability was found in libxml2 up to 2.14.5. It has been declared as problematic. This vulnerability     affects the function xmlParseSGMLCatalog of the component xmlcatalog. The manipulation leads to     uncontrolled recursion. Attacking locally is a requirement. The exploit has been disclosed to the public     and may be used. The real existence of this vulnerability is still doubted at the moment. The code     maintainer explains, that [t]he issue can only be triggered with untrusted SGML catalogs and it makes     absolutely no sense to use untrusted catalogs. I also doubt that anyone is still using SGML catalogs at     all. (CVE-2025-8732)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ57282. It is, therefore, affected by a vulnerability as referenced in the IJ57282 advisory.

  - A vulnerability was found in libxml2 up to 2.14.5. It has been declared as problematic. This vulnerability     affects the function xmlParseSGMLCatalog of the component xmlcatalog. The manipulation leads to     uncontrolled recursion. Attacking locally is a requirement. The exploit has been disclosed to the public     and may be used. The real existence of this vulnerability is still doubted at the moment. The code     maintainer explains, that [t]he issue can only be triggered with untrusted SGML catalogs and it makes     absolutely no sense to use untrusted catalogs. I also doubt that anyone is still using SGML catalogs at     all. (CVE-2025-8732)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ55968. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ55968 advisory.

  - IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 nimsh service SSL/TLS implementations could allow a remote     attacker to execute arbitrary commands due to improper process controls. This addresses additional attack     vectors for a vulnerability that was previously addressed in CVE-2024-56347. (CVE-2025-36251)

  - IBM AIX 7.2 and 7.3 nimsh service SSL/TLS protection mechanisms could allow a remote attacker to execute     arbitrary commands due to improper process controls. (CVE-2024-56347)

  - IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 stores NIM private keys used in NIM environments in an     insecure way which is susceptible to unauthorized access by an attacker using man in the middle     techniques. (CVE-2025-36096)

  - IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 NIM server (formerly known as NIM master) service (nimesis)     could allow a remote attacker to execute arbitrary commands due to improper process controls. This     addresses additional attack vectors for a vulnerability that was previously addressed in CVE-2024-56346.
    (CVE-2025-36250)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ56113. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ56113 advisory.

  - IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 nimsh service SSL/TLS implementations could allow a remote     attacker to execute arbitrary commands due to improper process controls. This addresses additional attack     vectors for a vulnerability that was previously addressed in CVE-2024-56347. (CVE-2025-36251)

  - IBM AIX 7.2 and 7.3 nimsh service SSL/TLS protection mechanisms could allow a remote attacker to execute     arbitrary commands due to improper process controls. (CVE-2024-56347)

  - IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 stores NIM private keys used in NIM environments in an     insecure way which is susceptible to unauthorized access by an attacker using man in the middle     techniques. (CVE-2025-36096)

  - IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 NIM server (formerly known as NIM master) service (nimesis)     could allow a remote attacker to execute arbitrary commands due to improper process controls. This     addresses additional attack vectors for a vulnerability that was previously addressed in CVE-2024-56346.
    (CVE-2025-36250)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ56230. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ56230 advisory.

  - IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 nimsh service SSL/TLS implementations could allow a remote     attacker to execute arbitrary commands due to improper process controls. This addresses additional attack     vectors for a vulnerability that was previously addressed in CVE-2024-56347. (CVE-2025-36251)

  - IBM AIX 7.2 and 7.3 nimsh service SSL/TLS protection mechanisms could allow a remote attacker to execute     arbitrary commands due to improper process controls. (CVE-2024-56347)

  - IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 stores NIM private keys used in NIM environments in an     insecure way which is susceptible to unauthorized access by an attacker using man in the middle     techniques. (CVE-2025-36096)

  - IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 NIM server (formerly known as NIM master) service (nimesis)     could allow a remote attacker to execute arbitrary commands due to improper process controls. This     addresses additional attack vectors for a vulnerability that was previously addressed in CVE-2024-56346.
    (CVE-2025-36250)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ55897. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ55897 advisory.

  - IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 nimsh service SSL/TLS implementations could allow a remote     attacker to execute arbitrary commands due to improper process controls. This addresses additional attack     vectors for a vulnerability that was previously addressed in CVE-2024-56347. (CVE-2025-36251)

  - IBM AIX 7.2 and 7.3 nimsh service SSL/TLS protection mechanisms could allow a remote attacker to execute     arbitrary commands due to improper process controls. (CVE-2024-56347)

  - IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 stores NIM private keys used in NIM environments in an     insecure way which is susceptible to unauthorized access by an attacker using man in the middle     techniques. (CVE-2025-36096)

  - IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 NIM server (formerly known as NIM master) service (nimesis)     could allow a remote attacker to execute arbitrary commands due to improper process controls. This     addresses additional attack vectors for a vulnerability that was previously addressed in CVE-2024-56346.
    (CVE-2025-36250)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ55695. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ55695 advisory.

  - A flaw was found in the X Record extension. The RecordSanityCheckRegisterClients function does not check     for an integer overflow when computing request length, which allows a client to bypass length checks.
    (CVE-2025-49179)

  - A flaw was found in the X Rendering extension's handling of animated cursors. If a client provides no     cursors, the server assumes at least one is present, leading to an out-of-bounds read and potential crash.
    (CVE-2025-49175)

  - A flaw was found in the Big Requests extension. The request length is multiplied by 4 before checking     against the maximum allowed size, potentially causing an integer overflow and bypassing the size check.
    (CVE-2025-49176)

  - A flaw was found in the X server's request handling. Non-zero 'bytes to ignore' in a client's request can     cause the server to skip processing another client's request, potentially leading to a denial of service.
    (CVE-2025-49178)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ55665. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ55665 advisory.

  - A flaw was found in the X Record extension. The RecordSanityCheckRegisterClients function does not check     for an integer overflow when computing request length, which allows a client to bypass length checks.
    (CVE-2025-49179)

  - A flaw was found in the X Rendering extension's handling of animated cursors. If a client provides no     cursors, the server assumes at least one is present, leading to an out-of-bounds read and potential crash.
    (CVE-2025-49175)

  - A flaw was found in the Big Requests extension. The request length is multiplied by 4 before checking     against the maximum allowed size, potentially causing an integer overflow and bypassing the size check.
    (CVE-2025-49176)

  - A flaw was found in the X server's request handling. Non-zero 'bytes to ignore' in a client's request can     cause the server to skip processing another client's request, potentially leading to a denial of service.
    (CVE-2025-49178)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ55267. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ55267 advisory.

  - A vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can     trigger a memory corruption issue. This flaw allows an attacker to craft a malicious XML input file that     can lead libxml to crash, resulting in a denial of service or other possible undefined behavior due to     sensitive data being corrupted in memory. (CVE-2025-49796)

  - A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under     certain circumstances when the XML schematron has the <sch:name path=.../> schema elements. This flaw     allows a malicious actor to craft a malicious XML document used as input for libxml, resulting in the     program's crash using libxml or other possible undefined behaviors. (CVE-2025-49794)

  - A NULL pointer dereference vulnerability was found in libxml2 when processing XPath XML expressions. This     flaw allows an attacker to craft a malicious XML input to libxml2, leading to a denial of service.
    (CVE-2025-49795)

  - A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations     can lead to a stack-based buffer overflow. This issue can result in memory corruption or a denial of     service when processing crafted input. (CVE-2025-6021)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ55269. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ55269 advisory.

  - A vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can     trigger a memory corruption issue. This flaw allows an attacker to craft a malicious XML input file that     can lead libxml to crash, resulting in a denial of service or other possible undefined behavior due to     sensitive data being corrupted in memory. (CVE-2025-49796)

  - A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under     certain circumstances when the XML schematron has the <sch:name path=.../> schema elements. This flaw     allows a malicious actor to craft a malicious XML document used as input for libxml, resulting in the     program's crash using libxml or other possible undefined behaviors. (CVE-2025-49794)

  - A NULL pointer dereference vulnerability was found in libxml2 when processing XPath XML expressions. This     flaw allows an attacker to craft a malicious XML input to libxml2, leading to a denial of service.
    (CVE-2025-49795)

  - A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations     can lead to a stack-based buffer overflow. This issue can result in memory corruption or a denial of     service when processing crafted input. (CVE-2025-6021)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ55266. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ55266 advisory.

  - A vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can     trigger a memory corruption issue. This flaw allows an attacker to craft a malicious XML input file that     can lead libxml to crash, resulting in a denial of service or other possible undefined behavior due to     sensitive data being corrupted in memory. (CVE-2025-49796)

  - A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under     certain circumstances when the XML schematron has the <sch:name path=.../> schema elements. This flaw     allows a malicious actor to craft a malicious XML document used as input for libxml, resulting in the     program's crash using libxml or other possible undefined behaviors. (CVE-2025-49794)

  - A NULL pointer dereference vulnerability was found in libxml2 when processing XPath XML expressions. This     flaw allows an attacker to craft a malicious XML input to libxml2, leading to a denial of service.
    (CVE-2025-49795)

  - A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations     can lead to a stack-based buffer overflow. This issue can result in memory corruption or a denial of     service when processing crafted input. (CVE-2025-6021)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ55268. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ55268 advisory.

  - A vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can     trigger a memory corruption issue. This flaw allows an attacker to craft a malicious XML input file that     can lead libxml to crash, resulting in a denial of service or other possible undefined behavior due to     sensitive data being corrupted in memory. (CVE-2025-49796)

  - A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under     certain circumstances when the XML schematron has the <sch:name path=.../> schema elements. This flaw     allows a malicious actor to craft a malicious XML document used as input for libxml, resulting in the     program's crash using libxml or other possible undefined behaviors. (CVE-2025-49794)

  - A NULL pointer dereference vulnerability was found in libxml2 when processing XPath XML expressions. This     flaw allows an attacker to craft a malicious XML input to libxml2, leading to a denial of service.
    (CVE-2025-49795)

  - A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations     can lead to a stack-based buffer overflow. This issue can result in memory corruption or a denial of     service when processing crafted input. (CVE-2025-6021)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ54779. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ54779 advisory.

  - A buffer overflow was discovered in libxml2 20904-GITv2.9.4-16-g0741801. The function     xmlSnprintfElementContent in valid.c is supposed to recursively dump the element content definition into a     char buffer 'buf' of size 'size'. The variable len is assigned strlen(buf). If the content->type is     XML_ELEMENT_CONTENT_ELEMENT, then (i) the content->prefix is appended to buf (if it actually fits)     whereupon (ii) content->name is written to the buffer. However, the check for whether the content->name     actually fits also uses 'len' rather than the updated buffer length strlen(buf). This allows us to write     about size many bytes beyond the allocated memory. This vulnerability causes programs that use libxml2,     such as PHP, to crash. (CVE-2017-9047)

  - libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements     in valid.c. To exploit this, DTD validation must occur for an untrusted document or untrusted DTD. NOTE:
    this is similar to CVE-2017-9047. (CVE-2025-24928)

  - libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in     pattern.c. (CVE-2025-27113)

  - libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and     xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be validated     against an XML schema with certain identity constraints, or a crafted XML schema must be used.
    (CVE-2024-56171)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ54679. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ54679 advisory.

  - A buffer overflow was discovered in libxml2 20904-GITv2.9.4-16-g0741801. The function     xmlSnprintfElementContent in valid.c is supposed to recursively dump the element content definition into a     char buffer 'buf' of size 'size'. The variable len is assigned strlen(buf). If the content->type is     XML_ELEMENT_CONTENT_ELEMENT, then (i) the content->prefix is appended to buf (if it actually fits)     whereupon (ii) content->name is written to the buffer. However, the check for whether the content->name     actually fits also uses 'len' rather than the updated buffer length strlen(buf). This allows us to write     about size many bytes beyond the allocated memory. This vulnerability causes programs that use libxml2,     such as PHP, to crash. (CVE-2017-9047)

  - libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements     in valid.c. To exploit this, DTD validation must occur for an untrusted document or untrusted DTD. NOTE:
    this is similar to CVE-2017-9047. (CVE-2025-24928)

  - libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in     pattern.c. (CVE-2025-27113)

  - libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and     xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be validated     against an XML schema with certain identity constraints, or a crafted XML schema must be used.
    (CVE-2024-56171)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ54754. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ54754 advisory.

  - A buffer overflow was discovered in libxml2 20904-GITv2.9.4-16-g0741801. The function     xmlSnprintfElementContent in valid.c is supposed to recursively dump the element content definition into a     char buffer 'buf' of size 'size'. The variable len is assigned strlen(buf). If the content->type is     XML_ELEMENT_CONTENT_ELEMENT, then (i) the content->prefix is appended to buf (if it actually fits)     whereupon (ii) content->name is written to the buffer. However, the check for whether the content->name     actually fits also uses 'len' rather than the updated buffer length strlen(buf). This allows us to write     about size many bytes beyond the allocated memory. This vulnerability causes programs that use libxml2,     such as PHP, to crash. (CVE-2017-9047)

  - libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements     in valid.c. To exploit this, DTD validation must occur for an untrusted document or untrusted DTD. NOTE:
    this is similar to CVE-2017-9047. (CVE-2025-24928)

  - libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in     pattern.c. (CVE-2025-27113)

  - libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and     xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be validated     against an XML schema with certain identity constraints, or a crafted XML schema must be used.
    (CVE-2024-56171)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ54873. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ54873 advisory.

  - A buffer overflow was discovered in libxml2 20904-GITv2.9.4-16-g0741801. The function     xmlSnprintfElementContent in valid.c is supposed to recursively dump the element content definition into a     char buffer 'buf' of size 'size'. The variable len is assigned strlen(buf). If the content->type is     XML_ELEMENT_CONTENT_ELEMENT, then (i) the content->prefix is appended to buf (if it actually fits)     whereupon (ii) content->name is written to the buffer. However, the check for whether the content->name     actually fits also uses 'len' rather than the updated buffer length strlen(buf). This allows us to write     about size many bytes beyond the allocated memory. This vulnerability causes programs that use libxml2,     such as PHP, to crash. (CVE-2017-9047)

  - libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements     in valid.c. To exploit this, DTD validation must occur for an untrusted document or untrusted DTD. NOTE:
    this is similar to CVE-2017-9047. (CVE-2025-24928)

  - libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in     pattern.c. (CVE-2025-27113)

  - libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and     xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be validated     against an XML schema with certain identity constraints, or a crafted XML schema must be used.
    (CVE-2024-56171)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ54059. It is, therefore, affected by a vulnerability as referenced in the IJ54059 advisory.

  - xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free. (CVE-2022-49043)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ54257. It is, therefore, affected by a vulnerability as referenced in the IJ54257 advisory.

  - xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free. (CVE-2022-49043)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ54258. It is, therefore, affected by a vulnerability as referenced in the IJ54258 advisory.

  - xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free. (CVE-2022-49043)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ54061. It is, therefore, affected by a vulnerability as referenced in the IJ54061 advisory.

  - xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free. (CVE-2022-49043)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ52533. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ52533 advisory.

  - IBM AIX 7.2, 7.3, VIOS 3.1, and 4.1 could allow a non-privileged local user to exploit a vulnerability in     the TCP/IP kernel extension to cause a denial of service. (CVE-2024-52906)

  - IBM AIX 7.2, 7.3, VIOS 3.1, and 4.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX perfstat kernel extension to cause a denial of service. (CVE-2024-47102)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ52610. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ52610 advisory.

  - IBM AIX 7.2, 7.3, VIOS 3.1, and 4.1 could allow a non-privileged local user to exploit a vulnerability in     the TCP/IP kernel extension to cause a denial of service. (CVE-2024-52906)

  - IBM AIX 7.2, 7.3, VIOS 3.1, and 4.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX perfstat kernel extension to cause a denial of service. (CVE-2024-47102)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ52978. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ52978 advisory.

  - IBM AIX 7.2, 7.3, VIOS 3.1, and 4.1 could allow a non-privileged local user to exploit a vulnerability in     the TCP/IP kernel extension to cause a denial of service. (CVE-2024-52906)

  - IBM AIX 7.2, 7.3, VIOS 3.1, and 4.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX perfstat kernel extension to cause a denial of service. (CVE-2024-47102)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ52366. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ52366 advisory.

  - IBM AIX 7.2, 7.3, VIOS 3.1, and 4.1 could allow a non-privileged local user to exploit a vulnerability in     the TCP/IP kernel extension to cause a denial of service. (CVE-2024-52906)

  - IBM AIX 7.2, 7.3, VIOS 3.1, and 4.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX perfstat kernel extension to cause a denial of service. (CVE-2024-47102)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ52977. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ52977 advisory.

  - IBM AIX 7.2, 7.3, VIOS 3.1, and 4.1 could allow a non-privileged local user to exploit a vulnerability in     the TCP/IP kernel extension to cause a denial of service. (CVE-2024-52906)

  - IBM AIX 7.2, 7.3, VIOS 3.1, and 4.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX perfstat kernel extension to cause a denial of service. (CVE-2024-47102)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ53001. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ53001 advisory.

  - IBM AIX 7.2, 7.3, VIOS 3.1, and 4.1 could allow a non-privileged local user to exploit a vulnerability in     the TCP/IP kernel extension to cause a denial of service. (CVE-2024-52906)

  - IBM AIX 7.2, 7.3, VIOS 3.1, and 4.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX perfstat kernel extension to cause a denial of service. (CVE-2024-47102)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ52421. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ52421 advisory.

  - IBM AIX 7.2, 7.3, VIOS 3.1, and 4.1 could allow a non-privileged local user to exploit a vulnerability in     the TCP/IP kernel extension to cause a denial of service. (CVE-2024-52906)

  - IBM AIX 7.2, 7.3, VIOS 3.1, and 4.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX perfstat kernel extension to cause a denial of service. (CVE-2024-47102)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ52999. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ52999 advisory.

  - IBM AIX 7.2, 7.3, VIOS 3.1, and 4.1 could allow a non-privileged local user to exploit a vulnerability in     the TCP/IP kernel extension to cause a denial of service. (CVE-2024-52906)

  - IBM AIX 7.2, 7.3, VIOS 3.1, and 4.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX perfstat kernel extension to cause a denial of service. (CVE-2024-47102)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ53929. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ53929 advisory.

  - IBM AIX 7.2 and 7.3 nimsh service SSL/TLS protection mechanisms could allow a remote attacker to execute     arbitrary commands due to improper process controls. (CVE-2024-56347)

  - IBM AIX 7.2 and 7.3 nimesis NIM master service could allow a remote attacker to execute arbitrary commands     due to improper process controls. (CVE-2024-56346)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ53923. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ53923 advisory.

  - IBM AIX 7.2 and 7.3 nimsh service SSL/TLS protection mechanisms could allow a remote attacker to execute     arbitrary commands due to improper process controls. (CVE-2024-56347)

  - IBM AIX 7.2 and 7.3 nimesis NIM master service could allow a remote attacker to execute arbitrary commands     due to improper process controls. (CVE-2024-56346)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ53757. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ53757 advisory.

  - IBM AIX 7.2 and 7.3 nimsh service SSL/TLS protection mechanisms could allow a remote attacker to execute     arbitrary commands due to improper process controls. (CVE-2024-56347)

  - IBM AIX 7.2 and 7.3 nimesis NIM master service could allow a remote attacker to execute arbitrary commands     due to improper process controls. (CVE-2024-56346)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ53792. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ53792 advisory.

  - IBM AIX 7.2 and 7.3 nimsh service SSL/TLS protection mechanisms could allow a remote attacker to execute     arbitrary commands due to improper process controls. (CVE-2024-56347)

  - IBM AIX 7.2 and 7.3 nimesis NIM master service could allow a remote attacker to execute arbitrary commands     due to improper process controls. (CVE-2024-56346)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ4442. It is, therefore, affected by a vulnerability as referenced in the IJ4442 advisory.

  - The code that processes control channel messages sent to `named` calls certain functions recursively     during packet parsing. Recursion depth is only limited by the maximum accepted packet size; depending on     the environment, this may cause the packet-parsing code to run out of available stack memory, causing     `named` to terminate unexpectedly. Since each incoming control channel message is fully parsed before its     contents are authenticated, exploiting this flaw does not require the attacker to hold a valid RNDC key;
    only network access to the control channel's configured TCP port is necessary. This issue affects BIND 9     versions 9.2.0 through 9.16.43, 9.18.0 through 9.18.18, 9.19.0 through 9.19.16, 9.9.3-S1 through     9.16.43-S1, and 9.18.0-S1 through 9.18.18-S1. (CVE-2023-3341)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ4909. It is, therefore, affected by a vulnerability as referenced in the IJ4909 advisory.

  - The code that processes control channel messages sent to `named` calls certain functions recursively     during packet parsing. Recursion depth is only limited by the maximum accepted packet size; depending on     the environment, this may cause the packet-parsing code to run out of available stack memory, causing     `named` to terminate unexpectedly. Since each incoming control channel message is fully parsed before its     contents are authenticated, exploiting this flaw does not require the attacker to hold a valid RNDC key;
    only network access to the control channel's configured TCP port is necessary. This issue affects BIND 9     versions 9.2.0 through 9.16.43, 9.18.0 through 9.18.18, 9.19.0 through 9.19.16, 9.9.3-S1 through     9.16.43-S1, and 9.18.0-S1 through 9.18.18-S1. (CVE-2023-3341)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ50428. It is, therefore, affected by a vulnerability as referenced in the IJ50428 advisory.

  - sendmail through 8.17.2 allows SMTP smuggling in certain configurations. Remote attackers can use a     published exploitation technique to inject e-mail messages with a spoofed MAIL FROM address, allowing     bypass of an SPF protection mechanism. This occurs because sendmail supports <LF>.<CR><LF> but some other     popular e-mail servers do not. This is resolved in 8.18 and later versions with 'o' in srv_features.
    (CVE-2023-51765)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ50424. It is, therefore, affected by a vulnerability as referenced in the IJ50424 advisory.

  - sendmail through 8.17.2 allows SMTP smuggling in certain configurations. Remote attackers can use a     published exploitation technique to inject e-mail messages with a spoofed MAIL FROM address, allowing     bypass of an SPF protection mechanism. This occurs because sendmail supports <LF>.<CR><LF> but some other     popular e-mail servers do not. This is resolved in 8.18 and later versions with 'o' in srv_features.
    (CVE-2023-51765)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ50635. It is, therefore, affected by a vulnerability as referenced in the IJ50635 advisory.

  - An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader     interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to     an xmlValidatePopElement use-after-free. (CVE-2024-25062)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ50433. It is, therefore, affected by a vulnerability as referenced in the IJ50433 advisory.

  - sendmail through 8.17.2 allows SMTP smuggling in certain configurations. Remote attackers can use a     published exploitation technique to inject e-mail messages with a spoofed MAIL FROM address, allowing     bypass of an SPF protection mechanism. This occurs because sendmail supports <LF>.<CR><LF> but some other     popular e-mail servers do not. This is resolved in 8.18 and later versions with 'o' in srv_features.
    (CVE-2023-51765)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ50910. It is, therefore, affected by a vulnerability as referenced in the IJ50910 advisory.

  - IBM AIX's Unix domain (AIX 7.2, 7.3, VIOS 3.1, and VIOS 4.1) datagram socket implementation could     potentially expose applications using Unix domain datagram sockets with SO_PEERID operation and may lead     to privilege escalation. IBM X-Force ID: 284903. (CVE-2024-27273)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ50827. It is, therefore, affected by a vulnerability as referenced in the IJ50827 advisory.

  - An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader     interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to     an xmlValidatePopElement use-after-free. (CVE-2024-25062)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ50936. It is, therefore, affected by a vulnerability as referenced in the IJ50936 advisory.

  - IBM AIX's Unix domain (AIX 7.2, 7.3, VIOS 3.1, and VIOS 4.1) datagram socket implementation could     potentially expose applications using Unix domain datagram sockets with SO_PEERID operation and may lead     to privilege escalation. IBM X-Force ID: 284903. (CVE-2024-27273)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ50432. It is, therefore, affected by a vulnerability as referenced in the IJ50432 advisory.

  - sendmail through 8.17.2 allows SMTP smuggling in certain configurations. Remote attackers can use a     published exploitation technique to inject e-mail messages with a spoofed MAIL FROM address, allowing     bypass of an SPF protection mechanism. This occurs because sendmail supports <LF>.<CR><LF> but some other     popular e-mail servers do not. This is resolved in 8.18 and later versions with 'o' in srv_features.
    (CVE-2023-51765)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ50935. It is, therefore, affected by a vulnerability as referenced in the IJ50935 advisory.

  - IBM AIX's Unix domain (AIX 7.2, 7.3, VIOS 3.1, and VIOS 4.1) datagram socket implementation could     potentially expose applications using Unix domain datagram sockets with SO_PEERID operation and may lead     to privilege escalation. IBM X-Force ID: 284903. (CVE-2024-27273)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ50602. It is, therefore, affected by a vulnerability as referenced in the IJ50602 advisory.

  - An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader     interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to     an xmlValidatePopElement use-after-free. (CVE-2024-25062)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ50601. It is, therefore, affected by a vulnerability as referenced in the IJ50601 advisory.

  - An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader     interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to     an xmlValidatePopElement use-after-free. (CVE-2024-25062)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Severity
299695	AIX : Multiple Vulnerabilities (IJ57162)	high
299694	AIX : Multiple Vulnerabilities (IJ57128)	high
299693	AIX : Multiple Vulnerabilities (IJ57232)	high
299611	AIX (IJ57292)	medium
299610	AIX (IJ57276)	medium
299609	AIX (IJ57291)	medium
299608	AIX (IJ57282)	medium
275719	AIX : Multiple Vulnerabilities (IJ55968)	critical
275718	AIX : Multiple Vulnerabilities (IJ56113)	critical
275717	AIX : Multiple Vulnerabilities (IJ56230)	critical
275716	AIX : Multiple Vulnerabilities (IJ55897)	critical
270141	AIX : Multiple Vulnerabilities (IJ55695)	high
270140	AIX : Multiple Vulnerabilities (IJ55665)	high
242259	AIX : Multiple Vulnerabilities (IJ55267)	critical
242258	AIX : Multiple Vulnerabilities (IJ55269)	critical
242257	AIX : Multiple Vulnerabilities (IJ55266)	critical
242256	AIX : Multiple Vulnerabilities (IJ55268)	critical
237756	AIX : Multiple Vulnerabilities (IJ54779)	high
237755	AIX : Multiple Vulnerabilities (IJ54679)	high
237754	AIX : Multiple Vulnerabilities (IJ54754)	high
237753	AIX : Multiple Vulnerabilities (IJ54873)	high
234852	AIX (IJ54059)	high
234851	AIX (IJ54257)	high
234850	AIX (IJ54258)	high
234849	AIX (IJ54061)	high
234452	AIX : Multiple Vulnerabilities (IJ52533)	medium
234451	AIX : Multiple Vulnerabilities (IJ52610)	medium
234450	AIX : Multiple Vulnerabilities (IJ52978)	medium
234449	AIX : Multiple Vulnerabilities (IJ52366)	medium
234448	AIX : Multiple Vulnerabilities (IJ52977)	medium
234447	AIX : Multiple Vulnerabilities (IJ53001)	medium
234446	AIX : Multiple Vulnerabilities (IJ52421)	medium
234445	AIX : Multiple Vulnerabilities (IJ52999)	medium
232953	AIX : Multiple Vulnerabilities (IJ53929)	critical
232952	AIX : Multiple Vulnerabilities (IJ53923)	critical
232951	AIX : Multiple Vulnerabilities (IJ53757)	critical
232950	AIX : Multiple Vulnerabilities (IJ53792)	critical
209561	AIX (IJ4442)	high
209560	AIX (IJ4909)	high
195317	AIX (IJ50428)	medium
195316	AIX (IJ50424)	medium
195315	AIX (IJ50635)	high
195314	AIX (IJ50433)	medium
195313	AIX (IJ50910)	high
195312	AIX (IJ50827)	high
195311	AIX (IJ50936)	high
195310	AIX (IJ50432)	medium
195309	AIX (IJ50935)	high
195308	AIX (IJ50602)	high
195307	AIX (IJ50601)	high

Detections

Analytics

AIX Local Security Checks Family for Nessus

high

high

high

medium

medium

medium

medium

critical

critical

critical

critical

high

high

critical

critical

critical

critical

high

high

high

high

high

high

high

high

medium

medium

medium

medium

medium

medium

medium

medium

critical

critical

critical

critical

high

high

medium

medium

high

medium

high

high

high

medium

high

high

high