The version of AIX installed on the remote host is prior to APAR IJ48784. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ48784 advisory.

  - IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the     piodmgrsu command to obtain elevated privileges. IBM X-Force ID: 267964. (CVE-2023-45166)

  - IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a privileged local user to exploit a vulnerability in the     qdaemon command to escalate privileges or cause a denial of service. IBM X-Force ID: 267972.
    (CVE-2023-45174)

  - IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the     piobe command to escalate privileges or cause a denial of service. IBM X-Force ID: 267968.
    (CVE-2023-45170)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3341 ISC BIND is vulnerable to a denial of service, caused by a stack exhaustion flaw in control channel code. By sending a specially crafted message over the control channel, a remote attacker could exploit this vulnerability to cause named to terminate.

The version of AIX installed on the remote host is prior to APAR IJ48539. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ48539 advisory.

  - IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the     piodmgrsu command to obtain elevated privileges. IBM X-Force ID: 267964. (CVE-2023-45166)

  - IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a privileged local user to exploit a vulnerability in the     qdaemon command to escalate privileges or cause a denial of service. IBM X-Force ID: 267972.
    (CVE-2023-45174)

  - IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the     piobe command to escalate privileges or cause a denial of service. IBM X-Force ID: 267968.
    (CVE-2023-45170)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ47630. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ47630 advisory.

  - An issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML     document, xmlDictComputeFastKey in dict.c can produce non-deterministic values, leading to various logic     and memory errors, such as a double free. This behavior occurs because there is an attempt to use the     first byte of an empty string, and any value is possible (not solely the '\0' value). (CVE-2023-29469)

  - In libxml2 before 2.10.4, parsing of certain invalid XSD schemas can lead to a NULL pointer dereference     and subsequently a segfault. This occurs in xmlSchemaFixupComplexType in xmlschemas.c. (CVE-2023-28484)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ47597. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ47597 advisory.

  - An issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML     document, xmlDictComputeFastKey in dict.c can produce non-deterministic values, leading to various logic     and memory errors, such as a double free. This behavior occurs because there is an attempt to use the     first byte of an empty string, and any value is possible (not solely the '\0' value). (CVE-2023-29469)

  - In libxml2 before 2.10.4, parsing of certain invalid XSD schemas can lead to a NULL pointer dereference     and subsequently a segfault. This occurs in xmlSchemaFixupComplexType in xmlschemas.c. (CVE-2023-28484)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434 zlib is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by inflate in inflate.c. By using a large gzip header extra field, a remote attacker could overflow a buffer and execute arbitrary code on the system.

The version of AIX installed on the remote host is prior to APAR IJ47629. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ47629 advisory.

  - An issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML     document, xmlDictComputeFastKey in dict.c can produce non-deterministic values, leading to various logic     and memory errors, such as a double free. This behavior occurs because there is an attempt to use the     first byte of an empty string, and any value is possible (not solely the '\0' value). (CVE-2023-29469)

  - In libxml2 before 2.10.4, parsing of certain invalid XSD schemas can lead to a NULL pointer dereference     and subsequently a segfault. This occurs in xmlSchemaFixupComplexType in xmlschemas.c. (CVE-2023-28484)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ45059. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ45059 advisory.

  - An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a     hash table key, potentially leading to subsequent logic errors. In one case, a double-free can be     provoked. (CVE-2022-40304)

  - An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the     XML_PARSE_HUGE parser option enabled, several integer counters can overflow. This results in an attempt to     access an array at a negative 2GB offset, typically leading to a segmentation fault. (CVE-2022-40303)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40304 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40304 Gnome ibxml2 could allow a remote attacker to execute arbitrary code on the system, caused by a dict corruption flaw. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. Gnome libxml2 could allow a remote attacker to execute arbitrary code on the system, caused by an integer overflow in the XML_PARSE_HUGE function. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system.

The version of AIX installed on the remote host is prior to APAR IJ45224. It is, therefore, affected by a vulnerability as referenced in the IJ45224 advisory.

  - Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service (FPS) merchant Java SDK and     other products, does not verify that the server hostname matches a domain name in the subject's Common     Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to     spoof SSL servers via an arbitrary valid certificate. (CVE-2012-5783)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ44562. It is, therefore, affected by a vulnerability as referenced in the IJ44562 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a local user with elevated privileges to exploit a     vulnerability in the lpd daemon to cause a denial of service. IBM X-Force ID: 238641. (CVE-2022-43382)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ44994. It is, therefore, affected by a vulnerability as referenced in the IJ44994 advisory.

  - Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service (FPS) merchant Java SDK and     other products, does not verify that the server hostname matches a domain name in the subject's Common     Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to     spoof SSL servers via an arbitrary valid certificate. (CVE-2012-5783)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ45997. It is, therefore, affected by a vulnerability as referenced in the IJ45997 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX runtime services library to execute arbitrary commands. IBM X-Force ID: 248421. (CVE-2023-26286)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ45221. It is, therefore, affected by a vulnerability as referenced in the IJ45221 advisory.

  - Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service (FPS) merchant Java SDK and     other products, does not verify that the server hostname matches a domain name in the subject's Common     Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to     spoof SSL servers via an arbitrary valid certificate. (CVE-2012-5783)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ45245. It is, therefore, affected by a vulnerability as referenced in the IJ45245 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX runtime services library to execute arbitrary commands. IBM X-Force ID: 248421. (CVE-2023-26286)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ45981. It is, therefore, affected by a vulnerability as referenced in the IJ45981 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX runtime services library to execute arbitrary commands. IBM X-Force ID: 248421. (CVE-2023-26286)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ44987. It is, therefore, affected by a vulnerability as referenced in the IJ44987 advisory.

  - Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service (FPS) merchant Java SDK and     other products, does not verify that the server hostname matches a domain name in the subject's Common     Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to     spoof SSL servers via an arbitrary valid certificate. (CVE-2012-5783)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ45246. It is, therefore, affected by a vulnerability as referenced in the IJ45246 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX runtime services library to execute arbitrary commands. IBM X-Force ID: 248421. (CVE-2023-26286)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25220 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25220 ISC BIND could allow a remote attacker to bypass security restrictions, caused by an error when using DNS forwarders. An attacker could exploit this vulnerability to poison the cache with incorrect records leading to queries being made to the wrong servers, which might also result in false information being returned to clients.

The version of AIX installed on the remote host is prior to APAR IJ41687. It is, therefore, affected by a vulnerability as referenced in the IJ41687 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to obtain root privileges. IBM X-Force ID: 230502. (CVE-2022-34356)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ41795. It is, therefore, affected by a vulnerability as referenced in the IJ41795 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to obtain root privileges. IBM X-Force ID: 230502. (CVE-2022-34356)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ41688. It is, therefore, affected by a vulnerability as referenced in the IJ41688 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to obtain root privileges. IBM X-Force ID: 230502. (CVE-2022-34356)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ41685. It is, therefore, affected by a vulnerability as referenced in the IJ41685 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to obtain root privileges. IBM X-Force ID: 230502. (CVE-2022-34356)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ41706. It is, therefore, affected by a vulnerability as referenced in the IJ41706 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to obtain root privileges. IBM X-Force ID: 230502. (CVE-2022-34356)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ43073. It is, therefore, affected by a vulnerability as referenced in the IJ43073 advisory.

  - IBM AIX 7.1, 7.2, 7.3 and VIOS , 3.1 could allow a non-privileged local user to exploit a vulnerability in     X11 to cause a buffer overflow that could result in a denial of service or arbitrary code execution. IBM     X-Force ID: 243556. (CVE-2022-47990)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ42939. It is, therefore, affected by a vulnerability as referenced in the IJ42939 advisory.

  - IBM AIX 7.1, 7.2, 7.3 and VIOS , 3.1 could allow a non-privileged local user to exploit a vulnerability in     X11 to cause a buffer overflow that could result in a denial of service or arbitrary code execution. IBM     X-Force ID: 243556. (CVE-2022-47990)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ42677. It is, therefore, affected by a vulnerability as referenced in the IJ42677 advisory.

  - IBM AIX 7.1, 7.2, 7.3 and VIOS , 3.1 could allow a non-privileged local user to exploit a vulnerability in     X11 to cause a buffer overflow that could result in a denial of service or arbitrary code execution. IBM     X-Force ID: 243556. (CVE-2022-47990)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38178 ISC BIND is vulnerable to a denial of service, caused by a memory leak in the DNSSEC verification code for the EdDSA algorithm. By spoofing the target resolver with responses that have a malformed EdDSA signature, a remote attacker could exploit this vulnerability to cause named to crash. ISC BIND is vulnerable to a denial of service, caused by an error when stale cache and stale answers are enabled, option stale-answer-client-timeout is set to 0 and there is a stale CNAME in the cache for an incoming query. By sending a specially-crafted request, a remote attacker could exploit this vulnerability to cause named to crash. ISC BIND is vulnerable to a denial of service, caused by a small memory leak in the DNSSEC verification code for the ECDSA algorithm. By spoofing the target resolver with responses that have a malformed ECDSA signature, a remote attacker could exploit this vulnerability to cause named to crash. ISC BIND is vulnerable to a denial of service, caused by a flaw in resolver code. By flooding the target resolver with queries, a remote attacker could exploit this vulnerability to severely degrade the resolver's performance, effectively denying legitimate clients access to the DNS resolution service.

The version of AIX installed on the remote host is prior to APAR IJ44564. It is, therefore, affected by a vulnerability as referenced in the IJ44564 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a local user with elevated privileges to exploit a     vulnerability in the lpd daemon to cause a denial of service. IBM X-Force ID: 238641. (CVE-2022-43382)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ44559. It is, therefore, affected by a vulnerability as referenced in the IJ44559 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a local user with elevated privileges to exploit a     vulnerability in the lpd daemon to cause a denial of service. IBM X-Force ID: 238641. (CVE-2022-43382)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ44552. It is, therefore, affected by a vulnerability as referenced in the IJ44552 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a local user with elevated privileges to exploit a     vulnerability in the lpd daemon to cause a denial of service. IBM X-Force ID: 238641. (CVE-2022-43382)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ42800. It is, therefore, affected by a vulnerability as referenced in the IJ42800 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a local user with elevated privileges to exploit a     vulnerability in the lpd daemon to cause a denial of service. IBM X-Force ID: 238641. (CVE-2022-43382)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ44594. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ44594 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX NFS kernel extension to cause a denial of service. IBM X-Force ID: 238640. (CVE-2022-43380)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX TCP/IP kernel extension to cause a denial of service. IBM X-Force ID: 235599. (CVE-2022-40233)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     CAA to cause a denial of service. IBM X-Force ID: 235183. (CVE-2022-39165)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX perfstat kernel extension to cause a denial of service. IBM X-Force ID: 239169. (CVE-2022-43848)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX pfcdd kernel extension to cause a denial of service. IBM X-Force ID: 239170. (CVE-2022-43849)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 235181. (CVE-2022-39164)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ43893. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ43893 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX NFS kernel extension to cause a denial of service. IBM X-Force ID: 238640. (CVE-2022-43380)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX TCP/IP kernel extension to cause a denial of service. IBM X-Force ID: 235599. (CVE-2022-40233)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     CAA to cause a denial of service. IBM X-Force ID: 235183. (CVE-2022-39165)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX perfstat kernel extension to cause a denial of service. IBM X-Force ID: 239169. (CVE-2022-43848)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX pfcdd kernel extension to cause a denial of service. IBM X-Force ID: 239170. (CVE-2022-43849)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 235181. (CVE-2022-39164)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ43875. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ43875 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX NFS kernel extension to cause a denial of service. IBM X-Force ID: 238640. (CVE-2022-43380)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX TCP/IP kernel extension to cause a denial of service. IBM X-Force ID: 235599. (CVE-2022-40233)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     CAA to cause a denial of service. IBM X-Force ID: 235183. (CVE-2022-39165)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX perfstat kernel extension to cause a denial of service. IBM X-Force ID: 239169. (CVE-2022-43848)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX pfcdd kernel extension to cause a denial of service. IBM X-Force ID: 239170. (CVE-2022-43849)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 235181. (CVE-2022-39164)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-39164 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-39164 IBM AIX could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to obtain root privileges. IBM AIX could allow a non-privileged local user to exploit a vulnerability in the AIX NFS kernel extension to cause a denial of service. IBM AIX could allow a non-privileged local user to exploit a vulnerability in the AIX TCP/IP kernel extension to cause a denial of service. IBM AIX could allow a non-privileged local user to exploit a vulnerability in CAA to cause a denial of service. IBM AIX could allow a non-privileged local user to exploit a vulnerability in the AIX perfstat kernel extension to cause a denial of service. IBM AIX could allow a non-privileged local user to exploit a vulnerability in the AIX pfcdd kernel extension to cause a denial of service.

The version of AIX installed on the remote host is prior to APAR IJ42937. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ42937 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX NFS kernel extension to cause a denial of service. IBM X-Force ID: 238640. (CVE-2022-43380)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX TCP/IP kernel extension to cause a denial of service. IBM X-Force ID: 235599. (CVE-2022-40233)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     CAA to cause a denial of service. IBM X-Force ID: 235183. (CVE-2022-39165)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX perfstat kernel extension to cause a denial of service. IBM X-Force ID: 239169. (CVE-2022-43848)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX pfcdd kernel extension to cause a denial of service. IBM X-Force ID: 239170. (CVE-2022-43849)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 235181. (CVE-2022-39164)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ43967. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ43967 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX NFS kernel extension to cause a denial of service. IBM X-Force ID: 238640. (CVE-2022-43380)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX TCP/IP kernel extension to cause a denial of service. IBM X-Force ID: 235599. (CVE-2022-40233)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     CAA to cause a denial of service. IBM X-Force ID: 235183. (CVE-2022-39165)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX perfstat kernel extension to cause a denial of service. IBM X-Force ID: 239169. (CVE-2022-43848)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX pfcdd kernel extension to cause a denial of service. IBM X-Force ID: 239170. (CVE-2022-43849)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 235181. (CVE-2022-39164)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ42938. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ42938 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX NFS kernel extension to cause a denial of service. IBM X-Force ID: 238640. (CVE-2022-43380)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX TCP/IP kernel extension to cause a denial of service. IBM X-Force ID: 235599. (CVE-2022-40233)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     CAA to cause a denial of service. IBM X-Force ID: 235183. (CVE-2022-39165)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX perfstat kernel extension to cause a denial of service. IBM X-Force ID: 239169. (CVE-2022-43848)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX pfcdd kernel extension to cause a denial of service. IBM X-Force ID: 239170. (CVE-2022-43849)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 235181. (CVE-2022-39164)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ43098. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ43098 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX NFS kernel extension to cause a denial of service. IBM X-Force ID: 238640. (CVE-2022-43380)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX TCP/IP kernel extension to cause a denial of service. IBM X-Force ID: 235599. (CVE-2022-40233)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     CAA to cause a denial of service. IBM X-Force ID: 235183. (CVE-2022-39165)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX perfstat kernel extension to cause a denial of service. IBM X-Force ID: 239169. (CVE-2022-43848)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX pfcdd kernel extension to cause a denial of service. IBM X-Force ID: 239170. (CVE-2022-43849)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 235181. (CVE-2022-39164)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Severity
187169	AIX : Multiple Vulnerabilities (IJ48784)	high
187168	AIX 7.2 TL 5 : bind (IJ44424)	high
187167	AIX : Multiple Vulnerabilities (IJ48539)	high
178849	AIX : Multiple Vulnerabilities (IJ47630)	medium
178848	AIX : Multiple Vulnerabilities (IJ47597)	medium
178847	AIX 7.3 TL 1 : zlib (IJ44986)	critical
178846	AIX 7.3 TL 0 : zlib (IJ46030)	critical
178845	AIX : Multiple Vulnerabilities (IJ47629)	medium
174455	AIX : Multiple Vulnerabilities (IJ45059)	high
174454	AIX 7.2 TL 5 : libxml2 (IJ45056)	high
174453	AIX 7.3 TL 1 : libxml2 (IJ45060)	high
174446	AIX (IJ45224)	low
174445	AIX (IJ44562)	medium
174444	AIX (IJ44994)	low
174443	AIX (IJ45997)	high
174442	AIX (IJ45221)	low
174441	AIX (IJ45245)	high
174440	AIX (IJ45981)	high
174439	AIX (IJ44987)	low
174438	AIX (IJ45246)	high
173299	AIX 7.2 TL 4 : bind (IJ40616)	medium
173298	AIX 7.2 TL 5 : bind (IJ40615)	medium
173297	AIX 7.1 TL 5 : bind (IJ40617)	medium
173296	AIX 7.3 TL 0 : bind (IJ40614)	medium
173247	AIX (IJ41687)	high
173246	AIX (IJ41795)	high
173245	AIX (IJ41688)	high
173244	AIX (IJ41685)	high
173243	AIX (IJ41706)	high
170125	AIX (IJ43073)	high
170124	AIX (IJ42939)	high
170123	AIX (IJ42677)	high
169317	AIX 7.2 TL 5 : bind (IJ44425)	high
169316	AIX 7.1 TL 5 : bind (IJ44422)	high
169315	AIX 7.3 TL 0 : bind (IJ44427)	high
168865	AIX (IJ44564)	medium
168864	AIX (IJ44559)	medium
168863	AIX (IJ44552)	medium
168862	AIX (IJ42800)	medium
168777	AIX : Multiple Vulnerabilities (IJ44594)	medium
168776	AIX : Multiple Vulnerabilities (IJ43893)	medium
168775	AIX : Multiple Vulnerabilities (IJ43875)	medium
168774	AIX 7.2 TL 5 : kernel (IJ44116)	medium
168773	AIX 7.2 TL 5 : kernel (IJ43869)	medium
168772	AIX : Multiple Vulnerabilities (IJ42937)	medium
168771	AIX 7.2 TL 5 : kernel (IJ44115)	medium
168770	AIX : Multiple Vulnerabilities (IJ43967)	medium
168769	AIX : Multiple Vulnerabilities (IJ42938)	medium
168768	AIX : Multiple Vulnerabilities (IJ43098)	medium
168767	AIX 7.2 TL 5 : kernel (IJ44114)	medium

Detections

Analytics

AIX Local Security Checks Family for Nessus

high

high

high

medium

medium

critical

critical

medium

high

high

high

low

medium

low

high

low

high

high

low

high

medium

medium

medium

medium

high

high

high

high

high

high

high

high

high

high

high

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium