https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38178 ISC BIND is vulnerable to a denial of service, caused by a memory leak in the DNSSEC verification code for the EdDSA algorithm. By spoofing the target resolver with responses that have a malformed EdDSA signature, a remote attacker could exploit this vulnerability to cause named to crash. ISC BIND is vulnerable to a denial of service, caused by an error when stale cache and stale answers are enabled, option stale-answer-client-timeout is set to 0 and there is a stale CNAME in the cache for an incoming query. By sending a specially-crafted request, a remote attacker could exploit this vulnerability to cause named to crash. ISC BIND is vulnerable to a denial of service, caused by a small memory leak in the DNSSEC verification code for the ECDSA algorithm. By spoofing the target resolver with responses that have a malformed ECDSA signature, a remote attacker could exploit this vulnerability to cause named to crash. ISC BIND is vulnerable to a denial of service, caused by a flaw in resolver code. By flooding the target resolver with queries, a remote attacker could exploit this vulnerability to severely degrade the resolver's performance, effectively denying legitimate clients access to the DNS resolution service.

The version of AIX installed on the remote host is prior to APAR IJ44564. It is, therefore, affected by a vulnerability as referenced in the IJ44564 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a local user with elevated privileges to exploit a     vulnerability in the lpd daemon to cause a denial of service. IBM X-Force ID: 238641. (CVE-2022-43382)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ44559. It is, therefore, affected by a vulnerability as referenced in the IJ44559 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a local user with elevated privileges to exploit a     vulnerability in the lpd daemon to cause a denial of service. IBM X-Force ID: 238641. (CVE-2022-43382)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ44552. It is, therefore, affected by a vulnerability as referenced in the IJ44552 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a local user with elevated privileges to exploit a     vulnerability in the lpd daemon to cause a denial of service. IBM X-Force ID: 238641. (CVE-2022-43382)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ42800. It is, therefore, affected by a vulnerability as referenced in the IJ42800 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a local user with elevated privileges to exploit a     vulnerability in the lpd daemon to cause a denial of service. IBM X-Force ID: 238641. (CVE-2022-43382)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ44594. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ44594 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX NFS kernel extension to cause a denial of service. IBM X-Force ID: 238640. (CVE-2022-43380)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX TCP/IP kernel extension to cause a denial of service. IBM X-Force ID: 235599. (CVE-2022-40233)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     CAA to cause a denial of service. IBM X-Force ID: 235183. (CVE-2022-39165)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX perfstat kernel extension to cause a denial of service. IBM X-Force ID: 239169. (CVE-2022-43848)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX pfcdd kernel extension to cause a denial of service. IBM X-Force ID: 239170. (CVE-2022-43849)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 235181. (CVE-2022-39164)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ43893. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ43893 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX NFS kernel extension to cause a denial of service. IBM X-Force ID: 238640. (CVE-2022-43380)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX TCP/IP kernel extension to cause a denial of service. IBM X-Force ID: 235599. (CVE-2022-40233)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     CAA to cause a denial of service. IBM X-Force ID: 235183. (CVE-2022-39165)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX perfstat kernel extension to cause a denial of service. IBM X-Force ID: 239169. (CVE-2022-43848)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX pfcdd kernel extension to cause a denial of service. IBM X-Force ID: 239170. (CVE-2022-43849)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 235181. (CVE-2022-39164)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ43875. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ43875 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX NFS kernel extension to cause a denial of service. IBM X-Force ID: 238640. (CVE-2022-43380)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX TCP/IP kernel extension to cause a denial of service. IBM X-Force ID: 235599. (CVE-2022-40233)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     CAA to cause a denial of service. IBM X-Force ID: 235183. (CVE-2022-39165)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX perfstat kernel extension to cause a denial of service. IBM X-Force ID: 239169. (CVE-2022-43848)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX pfcdd kernel extension to cause a denial of service. IBM X-Force ID: 239170. (CVE-2022-43849)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 235181. (CVE-2022-39164)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-39164 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-39164 IBM AIX could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to obtain root privileges. IBM AIX could allow a non-privileged local user to exploit a vulnerability in the AIX NFS kernel extension to cause a denial of service. IBM AIX could allow a non-privileged local user to exploit a vulnerability in the AIX TCP/IP kernel extension to cause a denial of service. IBM AIX could allow a non-privileged local user to exploit a vulnerability in CAA to cause a denial of service. IBM AIX could allow a non-privileged local user to exploit a vulnerability in the AIX perfstat kernel extension to cause a denial of service. IBM AIX could allow a non-privileged local user to exploit a vulnerability in the AIX pfcdd kernel extension to cause a denial of service.

The version of AIX installed on the remote host is prior to APAR IJ42937. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ42937 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX NFS kernel extension to cause a denial of service. IBM X-Force ID: 238640. (CVE-2022-43380)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX TCP/IP kernel extension to cause a denial of service. IBM X-Force ID: 235599. (CVE-2022-40233)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     CAA to cause a denial of service. IBM X-Force ID: 235183. (CVE-2022-39165)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX perfstat kernel extension to cause a denial of service. IBM X-Force ID: 239169. (CVE-2022-43848)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX pfcdd kernel extension to cause a denial of service. IBM X-Force ID: 239170. (CVE-2022-43849)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 235181. (CVE-2022-39164)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ43967. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ43967 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX NFS kernel extension to cause a denial of service. IBM X-Force ID: 238640. (CVE-2022-43380)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX TCP/IP kernel extension to cause a denial of service. IBM X-Force ID: 235599. (CVE-2022-40233)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     CAA to cause a denial of service. IBM X-Force ID: 235183. (CVE-2022-39165)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX perfstat kernel extension to cause a denial of service. IBM X-Force ID: 239169. (CVE-2022-43848)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX pfcdd kernel extension to cause a denial of service. IBM X-Force ID: 239170. (CVE-2022-43849)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 235181. (CVE-2022-39164)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ42938. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ42938 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX NFS kernel extension to cause a denial of service. IBM X-Force ID: 238640. (CVE-2022-43380)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX TCP/IP kernel extension to cause a denial of service. IBM X-Force ID: 235599. (CVE-2022-40233)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     CAA to cause a denial of service. IBM X-Force ID: 235183. (CVE-2022-39165)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX perfstat kernel extension to cause a denial of service. IBM X-Force ID: 239169. (CVE-2022-43848)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX pfcdd kernel extension to cause a denial of service. IBM X-Force ID: 239170. (CVE-2022-43849)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 235181. (CVE-2022-39164)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ43098. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ43098 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX NFS kernel extension to cause a denial of service. IBM X-Force ID: 238640. (CVE-2022-43380)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX TCP/IP kernel extension to cause a denial of service. IBM X-Force ID: 235599. (CVE-2022-40233)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     CAA to cause a denial of service. IBM X-Force ID: 235183. (CVE-2022-39165)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX perfstat kernel extension to cause a denial of service. IBM X-Force ID: 239169. (CVE-2022-43848)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX pfcdd kernel extension to cause a denial of service. IBM X-Force ID: 239170. (CVE-2022-43849)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 235181. (CVE-2022-39164)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ42163. It is, therefore, affected by a vulnerability as referenced in the IJ42163 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the rm_rlcache_file command to obtain root privileges. IBM X-Force ID: 236690. (CVE-2022-41290)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ42230. It is, therefore, affected by a vulnerability as referenced in the IJ42230 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the rm_rlcache_file command to obtain root privileges. IBM X-Force ID: 236690. (CVE-2022-41290)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ43877. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ43877 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX NFS kernel extension to cause a denial of service. IBM X-Force ID: 238640. (CVE-2022-43380)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX TCP/IP kernel extension to cause a denial of service. IBM X-Force ID: 235599. (CVE-2022-40233)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     CAA to cause a denial of service. IBM X-Force ID: 235183. (CVE-2022-39165)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX perfstat kernel extension to cause a denial of service. IBM X-Force ID: 239169. (CVE-2022-43848)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX pfcdd kernel extension to cause a denial of service. IBM X-Force ID: 239170. (CVE-2022-43849)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 235181. (CVE-2022-39164)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ42159. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ42159 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX NFS kernel extension to cause a denial of service. IBM X-Force ID: 238640. (CVE-2022-43380)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX TCP/IP kernel extension to cause a denial of service. IBM X-Force ID: 235599. (CVE-2022-40233)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     CAA to cause a denial of service. IBM X-Force ID: 235183. (CVE-2022-39165)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX perfstat kernel extension to cause a denial of service. IBM X-Force ID: 239169. (CVE-2022-43848)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX pfcdd kernel extension to cause a denial of service. IBM X-Force ID: 239170. (CVE-2022-43849)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 235181. (CVE-2022-39164)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ42234. It is, therefore, affected by a vulnerability as referenced in the IJ42234 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the rm_rlcache_file command to obtain root privileges. IBM X-Force ID: 236690. (CVE-2022-41290)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ41975. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ41975 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX NFS kernel extension to cause a denial of service. IBM X-Force ID: 238640. (CVE-2022-43380)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX TCP/IP kernel extension to cause a denial of service. IBM X-Force ID: 235599. (CVE-2022-40233)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     CAA to cause a denial of service. IBM X-Force ID: 235183. (CVE-2022-39165)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX perfstat kernel extension to cause a denial of service. IBM X-Force ID: 239169. (CVE-2022-43848)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX pfcdd kernel extension to cause a denial of service. IBM X-Force ID: 239170. (CVE-2022-43849)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 235181. (CVE-2022-39164)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ43099. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ43099 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX NFS kernel extension to cause a denial of service. IBM X-Force ID: 238640. (CVE-2022-43380)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX TCP/IP kernel extension to cause a denial of service. IBM X-Force ID: 235599. (CVE-2022-40233)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     CAA to cause a denial of service. IBM X-Force ID: 235183. (CVE-2022-39165)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX perfstat kernel extension to cause a denial of service. IBM X-Force ID: 239169. (CVE-2022-43848)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX pfcdd kernel extension to cause a denial of service. IBM X-Force ID: 239170. (CVE-2022-43849)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 235181. (CVE-2022-39164)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ41974. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ41974 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX NFS kernel extension to cause a denial of service. IBM X-Force ID: 238640. (CVE-2022-43380)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX TCP/IP kernel extension to cause a denial of service. IBM X-Force ID: 235599. (CVE-2022-40233)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     CAA to cause a denial of service. IBM X-Force ID: 235183. (CVE-2022-39165)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX perfstat kernel extension to cause a denial of service. IBM X-Force ID: 239169. (CVE-2022-43848)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX pfcdd kernel extension to cause a denial of service. IBM X-Force ID: 239170. (CVE-2022-43849)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 235181. (CVE-2022-39164)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ43468. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ43468 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX NFS kernel extension to cause a denial of service. IBM X-Force ID: 238640. (CVE-2022-43380)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX TCP/IP kernel extension to cause a denial of service. IBM X-Force ID: 235599. (CVE-2022-40233)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     CAA to cause a denial of service. IBM X-Force ID: 235183. (CVE-2022-39165)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX perfstat kernel extension to cause a denial of service. IBM X-Force ID: 239169. (CVE-2022-43848)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX pfcdd kernel extension to cause a denial of service. IBM X-Force ID: 239170. (CVE-2022-43849)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 235181. (CVE-2022-39164)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ43072. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ43072 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX NFS kernel extension to cause a denial of service. IBM X-Force ID: 238640. (CVE-2022-43380)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX TCP/IP kernel extension to cause a denial of service. IBM X-Force ID: 235599. (CVE-2022-40233)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     CAA to cause a denial of service. IBM X-Force ID: 235183. (CVE-2022-39165)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX perfstat kernel extension to cause a denial of service. IBM X-Force ID: 239169. (CVE-2022-43848)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX pfcdd kernel extension to cause a denial of service. IBM X-Force ID: 239170. (CVE-2022-43849)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 235181. (CVE-2022-39164)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ43970. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ43970 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX NFS kernel extension to cause a denial of service. IBM X-Force ID: 238640. (CVE-2022-43380)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX TCP/IP kernel extension to cause a denial of service. IBM X-Force ID: 235599. (CVE-2022-40233)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     CAA to cause a denial of service. IBM X-Force ID: 235183. (CVE-2022-39165)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX perfstat kernel extension to cause a denial of service. IBM X-Force ID: 239169. (CVE-2022-43848)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX pfcdd kernel extension to cause a denial of service. IBM X-Force ID: 239170. (CVE-2022-43849)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 235181. (CVE-2022-39164)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ43980. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ43980 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX NFS kernel extension to cause a denial of service. IBM X-Force ID: 238640. (CVE-2022-43380)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX TCP/IP kernel extension to cause a denial of service. IBM X-Force ID: 235599. (CVE-2022-40233)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     CAA to cause a denial of service. IBM X-Force ID: 235183. (CVE-2022-39165)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX perfstat kernel extension to cause a denial of service. IBM X-Force ID: 239169. (CVE-2022-43848)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX pfcdd kernel extension to cause a denial of service. IBM X-Force ID: 239170. (CVE-2022-43849)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 235181. (CVE-2022-39164)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ43876. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ43876 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX NFS kernel extension to cause a denial of service. IBM X-Force ID: 238640. (CVE-2022-43380)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX TCP/IP kernel extension to cause a denial of service. IBM X-Force ID: 235599. (CVE-2022-40233)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     CAA to cause a denial of service. IBM X-Force ID: 235183. (CVE-2022-39165)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX perfstat kernel extension to cause a denial of service. IBM X-Force ID: 239169. (CVE-2022-43848)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX pfcdd kernel extension to cause a denial of service. IBM X-Force ID: 239170. (CVE-2022-43849)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 235181. (CVE-2022-39164)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ43891. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ43891 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX NFS kernel extension to cause a denial of service. IBM X-Force ID: 238640. (CVE-2022-43380)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX TCP/IP kernel extension to cause a denial of service. IBM X-Force ID: 235599. (CVE-2022-40233)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     CAA to cause a denial of service. IBM X-Force ID: 235183. (CVE-2022-39165)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX perfstat kernel extension to cause a denial of service. IBM X-Force ID: 239169. (CVE-2022-43848)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX pfcdd kernel extension to cause a denial of service. IBM X-Force ID: 239170. (CVE-2022-43849)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 235181. (CVE-2022-39164)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ44595. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ44595 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX NFS kernel extension to cause a denial of service. IBM X-Force ID: 238640. (CVE-2022-43380)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX TCP/IP kernel extension to cause a denial of service. IBM X-Force ID: 235599. (CVE-2022-40233)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     CAA to cause a denial of service. IBM X-Force ID: 235183. (CVE-2022-39165)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX perfstat kernel extension to cause a denial of service. IBM X-Force ID: 239169. (CVE-2022-43848)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX pfcdd kernel extension to cause a denial of service. IBM X-Force ID: 239170. (CVE-2022-43849)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 235181. (CVE-2022-39164)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29824 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29824 GNOME libxml2 is vulnerable to a denial of service, caused by an integer overflows in several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*). By persuading a victim to open a specially-crafted XML file, a remote attacker could exploit this vulnerability to cause a denial of service condition.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22444 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22444 IBM AIX could allow a local user to exploit a vulnerability in the lpd daemon to cause a denial of service.

The version of AIX installed on the remote host is prior to APAR IJ37706. It is, therefore, affected by a vulnerability as referenced in the IJ37706 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged trusted host user to exploit a     vulnerability in the nimsh daemon to cause a denial of service in the nimsh daemon on another trusted     host. IBM X-Force ID: 220396 (CVE-2022-22351)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ37488. It is, therefore, affected by a vulnerability as referenced in the IJ37488 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 212951. (CVE-2021-38989)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ37419. It is, therefore, affected by a vulnerability as referenced in the IJ37419 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged trusted host user to exploit a     vulnerability in the nimsh daemon to cause a denial of service in the nimsh daemon on another trusted     host. IBM X-Force ID: 220396 (CVE-2022-22351)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ37494. It is, therefore, affected by a vulnerability as referenced in the IJ37494 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 212950. (CVE-2021-38988)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ36593. It is, therefore, affected by a vulnerability as referenced in the IJ36593 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged trusted host user to exploit a     vulnerability in the nimsh daemon to cause a denial of service in the nimsh daemon on another trusted     host. IBM X-Force ID: 220396 (CVE-2022-22351)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ37503. It is, therefore, affected by a vulnerability as referenced in the IJ37503 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 212951. (CVE-2021-38989)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ37411. It is, therefore, affected by a vulnerability as referenced in the IJ37411 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 212951. (CVE-2021-38989)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ37507. It is, therefore, affected by a vulnerability as referenced in the IJ37507 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 212951. (CVE-2021-38989)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ37508. It is, therefore, affected by a vulnerability as referenced in the IJ37508 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 212950. (CVE-2021-38988)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Severity
169315	AIX 7.3 TL 0 : bind (IJ44427)	high
168865	AIX (IJ44564)	medium
168864	AIX (IJ44559)	medium
168863	AIX (IJ44552)	medium
168862	AIX (IJ42800)	medium
168777	AIX : Multiple Vulnerabilities (IJ44594)	medium
168776	AIX : Multiple Vulnerabilities (IJ43893)	medium
168775	AIX : Multiple Vulnerabilities (IJ43875)	medium
168774	AIX 7.2 TL 5 : kernel (IJ44116)	medium
168773	AIX 7.2 TL 5 : kernel (IJ43869)	medium
168772	AIX : Multiple Vulnerabilities (IJ42937)	medium
168771	AIX 7.2 TL 5 : kernel (IJ44115)	medium
168770	AIX : Multiple Vulnerabilities (IJ43967)	medium
168769	AIX : Multiple Vulnerabilities (IJ42938)	medium
168768	AIX : Multiple Vulnerabilities (IJ43098)	medium
168767	AIX 7.2 TL 5 : kernel (IJ44114)	medium
168766	AIX 7.2 TL 5 : kernel (IJ43598)	medium
168765	AIX (IJ42163)	high
168764	AIX (IJ42230)	high
168763	AIX : Multiple Vulnerabilities (IJ43877)	medium
168762	AIX : Multiple Vulnerabilities (IJ42159)	medium
168761	AIX (IJ42234)	high
168760	AIX : Multiple Vulnerabilities (IJ41975)	medium
168759	AIX : Multiple Vulnerabilities (IJ43099)	medium
168758	AIX 7.2 TL 5 : kernel (IJ43674)	medium
168757	AIX : Multiple Vulnerabilities (IJ41974)	medium
168756	AIX : Multiple Vulnerabilities (IJ43468)	medium
168755	AIX : Multiple Vulnerabilities (IJ43072)	medium
168754	AIX : Multiple Vulnerabilities (IJ43970)	medium
168753	AIX : Multiple Vulnerabilities (IJ43980)	medium
168752	AIX : Multiple Vulnerabilities (IJ43876)	medium
168751	AIX : Multiple Vulnerabilities (IJ43891)	medium
168750	AIX : Multiple Vulnerabilities (IJ44595)	medium
165285	AIX 7.3 TL 0 : libxml2 (IJ42341)	medium
165284	AIX 7.2 TL 4 : libxml2 (IJ42381)	medium
165283	AIX 7.2 TL 5 : libxml2 (IJ42339)	medium
162226	AIX 7.3 TL 0 : lpd (IJ39877)	medium
162225	AIX 7.2 TL 4 : lpd (IJ39875)	medium
162224	AIX 7.2 TL 5 : lpd (IJ39878)	medium
162223	AIX 7.2 TL 5 : lpd (IJ39876)	medium
162222	AIX 7.1 TL 5 : lpd (IJ39868)	medium
158671	AIX (IJ37706)	high
158670	AIX (IJ37488)	medium
158669	AIX (IJ37419)	high
158668	AIX (IJ37494)	medium
158667	AIX (IJ36593)	high
158666	AIX (IJ37503)	medium
158665	AIX (IJ37411)	medium
158664	AIX (IJ37507)	medium
158663	AIX (IJ37508)	medium

Detections

Analytics

AIX Local Security Checks Family for Nessus

high

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

high

high

medium

medium

high

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

high

medium

high

medium

high

medium

medium

medium

medium