http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-38955 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-38955 IBM AIX could allow a local user with elevated privileges to cause a denial of service due to a file creation vulnerability in the audit commands.

The version of AIX installed on the remote host is prior to APAR IJ37452. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ37452 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 213073. (CVE-2021-38995)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 213072. (CVE-2021-38994)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ37501. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ37501 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 213073. (CVE-2021-38995)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 213072. (CVE-2021-38994)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ37776. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ37776 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 213073. (CVE-2021-38995)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 213072. (CVE-2021-38994)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ37012. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ37012 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 213073. (CVE-2021-38995)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 213072. (CVE-2021-38994)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ37001. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ37001 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 213073. (CVE-2021-38995)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 213072. (CVE-2021-38994)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ36805. It is, therefore, affected by a vulnerability as referenced in the IJ36805 advisory.

  - IBM AIX 7.0, 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the lscore command which could lead to code execution. IBM X-Force ID: 212953. (CVE-2021-38991)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ36816. It is, therefore, affected by a vulnerability as referenced in the IJ36816 advisory.

  - IBM AIX 7.0, 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the lscore command which could lead to code execution. IBM X-Force ID: 212953. (CVE-2021-38991)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ36810. It is, therefore, affected by a vulnerability as referenced in the IJ36810 advisory.

  - IBM AIX 7.0, 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the lscore command which could lead to code execution. IBM X-Force ID: 212953. (CVE-2021-38991)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ36806. It is, therefore, affected by a vulnerability as referenced in the IJ36806 advisory.

  - IBM AIX 7.0, 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the lscore command which could lead to code execution. IBM X-Force ID: 212953. (CVE-2021-38991)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ36815. It is, therefore, affected by a vulnerability as referenced in the IJ36815 advisory.

  - IBM AIX 7.0, 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the lscore command which could lead to code execution. IBM X-Force ID: 212953. (CVE-2021-38991)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ36125. It is, therefore, affected by a vulnerability as referenced in the IJ36125 advisory.

  - IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the     mount command which could lead to code execution. IBM X-Force ID: 212952. (CVE-2021-38990)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ35620. It is, therefore, affected by a vulnerability as referenced in the IJ35620 advisory.

  - IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the     mount command which could lead to code execution. IBM X-Force ID: 212952. (CVE-2021-38990)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ35623. It is, therefore, affected by a vulnerability as referenced in the IJ35623 advisory.

  - IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the     mount command which could lead to code execution. IBM X-Force ID: 212952. (CVE-2021-38990)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ35826. It is, therefore, affected by a vulnerability as referenced in the IJ35826 advisory.

  - IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the     mount command which could lead to code execution. IBM X-Force ID: 212952. (CVE-2021-38990)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ35078. It is, therefore, affected by a vulnerability as referenced in the IJ35078 advisory.

  - IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in EFS     to expose sensitive information. IBM X-Force ID: 206085. (CVE-2021-29861)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ33560. It is, therefore, affected by a vulnerability as referenced in the IJ33560 advisory.

  - IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the     libc.a library to expose sensitive information. IBM X-Force ID: 206084. (CVE-2021-29860)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ35673. It is, therefore, affected by a vulnerability as referenced in the IJ35673 advisory.

  - IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the     libc.a library to expose sensitive information. IBM X-Force ID: 206084. (CVE-2021-29860)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ35780. It is, therefore, affected by a vulnerability as referenced in the IJ35780 advisory.

  - IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in EFS     to expose sensitive information. IBM X-Force ID: 206085. (CVE-2021-29861)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ35211. It is, therefore, affected by a vulnerability as referenced in the IJ35211 advisory.

  - IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in EFS     to expose sensitive information. IBM X-Force ID: 206085. (CVE-2021-29861)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ35226. It is, therefore, affected by a vulnerability as referenced in the IJ35226 advisory.

  - IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in EFS     to expose sensitive information. IBM X-Force ID: 206085. (CVE-2021-29861)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ34081. It is, therefore, affected by a vulnerability as referenced in the IJ34081 advisory.

  - IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the     libc.a library to expose sensitive information. IBM X-Force ID: 206084. (CVE-2021-29860)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ34512. It is, therefore, affected by a vulnerability as referenced in the IJ34512 advisory.

  - IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the     libc.a library to expose sensitive information. IBM X-Force ID: 206084. (CVE-2021-29860)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29727 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29727 IBM AIX could allow a local user to exploit a vulnerability in the AIX kernel to cause a denial of service. IBM AIX could allow a non-privileged local user to exploit a vulnerability in the kernel to gain root privileges. IBM AIX could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to cause a denial of service.

The version of OpenSSL installed on the remote AIX host is affected by a denial of service vulnerability.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29741 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29741 IBM AIX could allow a local user to exploit a vulnerability in Korn Shell (ksh) to gain root privileges.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25215 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25215 ISC BIND is vulnerable to a denial of service, caused by an assertion failure while answering queries for DNAME records. By sending a query for DNAME records, an attacker could exploit this vulnerability to trigger a failed assertion check and terminate the named process.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29693 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29693 IBM AIX could allow a local user with elevated privileges to exploit a vulnerability in the lpd daemon.

IBM AIX could allow a non-privileged local user to exploit a vulnerability in the trace facility to expose sensitive information or cause a denial of service. (CVE-2021-29706)

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-4887 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-4887 The AIX gencore user command may be exploited to create arbitrary files in any directory.

The AIX gencore user command may be exploited to create arbitrary files in any directory. (CVE-2020-4887)

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8622 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8622 ISC BIND is vulnerable to a denial of service, caused by an assertion failure when attempting to verify a truncated response to a TSIG-signed request. By sending a specially-crafted request, a remote authenticated attacker could exploit this vulnerability to cause the server to exit.

ID	Name	Severity
158497	AIX 7.1 TL 5 : audit (IJ38113)	medium
158496	AIX 7.2 TL 5 : audit (IJ38119)	medium
158495	AIX 7.2 TL 5 : audit (IJ38117)	medium
158346	AIX : Multiple Vulnerabilities (IJ37452)	medium
158345	AIX : Multiple Vulnerabilities (IJ37501)	medium
158344	AIX : Multiple Vulnerabilities (IJ37776)	medium
158343	AIX : Multiple Vulnerabilities (IJ37012)	medium
158342	AIX : Multiple Vulnerabilities (IJ37001)	medium
156602	AIX (IJ36805)	high
156601	AIX (IJ36816)	high
156600	AIX (IJ36810)	high
156599	AIX (IJ36806)	high
156596	AIX (IJ36815)	high
156556	AIX (IJ36125)	high
156555	AIX (IJ35620)	high
156554	AIX (IJ35623)	high
156553	AIX (IJ35826)	high
155459	AIX (IJ35078)	medium
155458	AIX (IJ33560)	medium
155457	AIX (IJ35673)	medium
155456	AIX (IJ35780)	medium
155455	AIX (IJ35211)	medium
155454	AIX (IJ35226)	medium
155453	AIX (IJ34081)	medium
155452	AIX (IJ34512)	medium
152858	AIX 7.2 TL 4 : kernel (IJ32630)	high
152856	AIX 7.2 TL 3 : kernel (IJ32629)	high
152855	AIX 7.2 TL 5 : kernel (IJ32631)	high
152854	AIX 7.1 TL 5 : kernel (IJ33318)	high
152700	AIX OpenSSL Advisory : openssl_advisory28.asc	high
152175	AIX 7.2 TL 5 : ksh (IJ30557)	high
152174	AIX 7.2 TL 4 : ksh (IJ31614)	high
152173	AIX 7.1 TL 5 : ksh (IJ31606)	high
152172	AIX 7.2 TL 3 : ksh (IJ32285)	high
152152	AIX 7.2 TL 4 : bind (IJ33278)	high
152151	AIX 7.2 TL 3 : bind (IJ33277)	high
152149	AIX 7.2 TL 5 : bind (IJ33279)	high
152148	AIX 7.1 TL 5 : bind (IJ33276)	high
151051	AIX 7.2 TL 3 : lpd (IJ30799)	medium
151050	AIX 7.1 TL 5 : lpd (IJ30372)	medium
151030	AIX 7.2 TL 4 : lpd (IJ30800)	medium
151027	AIX 7.2 TL 5 : lpd (IJ30447)	medium
150804	AIX 7.1 TL 5 : trace (IJ32940)	medium
145195	AIX 7.2 TL 4 : gencore (IJ28827)	medium
145124	AIX 7.2 TL 5 : gencore (IJ28828)	medium
145114	AIX 7.2 TL 3 : gencore (IJ28826)	medium
145097	AIX 7.1 TL 5 : gencore (IJ28825)	medium
144502	AIX 7.1 TL 5 : bind (IJ29230)	medium
144498	AIX 7.2 TL 4 : bind (IJ29231)	medium
144496	AIX 7.2 TL 3 : bind (IJ29229)	medium

Detections

Analytics

AIX Local Security Checks Family for Nessus

medium

medium

medium

medium

medium

medium

medium

medium

high

high

high

high

high

high

high

high

high

medium

medium

medium

medium

medium

medium

medium

medium

high

high

high

high

high

high

high

high

high

high

high

high

high

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium