The version of AIX installed on the remote host is prior to APAR IJ37504. It is, therefore, affected by a vulnerability as referenced in the IJ37504 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 212950. (CVE-2021-38988)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ37403. It is, therefore, affected by a vulnerability as referenced in the IJ37403 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 212950. (CVE-2021-38988)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ37705. It is, therefore, affected by a vulnerability as referenced in the IJ37705 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged trusted host user to exploit a     vulnerability in the nimsh daemon to cause a denial of service in the nimsh daemon on another trusted     host. IBM X-Force ID: 220396 (CVE-2022-22351)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ37778. It is, therefore, affected by a vulnerability as referenced in the IJ37778 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 212951. (CVE-2021-38989)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ36681. It is, therefore, affected by a vulnerability as referenced in the IJ36681 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged trusted host user to exploit a     vulnerability in the nimsh daemon to cause a denial of service in the nimsh daemon on another trusted     host. IBM X-Force ID: 220396 (CVE-2022-22351)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ37225. It is, therefore, affected by a vulnerability as referenced in the IJ37225 advisory.

  - In BIND 9.3.0 -> 9.11.35, 9.12.0 -> 9.16.21, and versions 9.9.3-S1 -> 9.11.35-S1 and 9.16.8-S1 ->     9.16.21-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.18 of the BIND     9.17 development branch, exploitation of broken authoritative servers using a flaw in response processing     can cause degradation in BIND resolver performance. The way the lame cache is currently designed makes it     possible for its internal data structures to grow almost infinitely, which may cause significant delays in     client query processing. (CVE-2021-25219)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ37222. It is, therefore, affected by a vulnerability as referenced in the IJ37222 advisory.

  - In BIND 9.3.0 -> 9.11.35, 9.12.0 -> 9.16.21, and versions 9.9.3-S1 -> 9.11.35-S1 and 9.16.8-S1 ->     9.16.21-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.18 of the BIND     9.17 development branch, exploitation of broken authoritative servers using a flaw in response processing     can cause degradation in BIND resolver performance. The way the lame cache is currently designed makes it     possible for its internal data structures to grow almost infinitely, which may cause significant delays in     client query processing. (CVE-2021-25219)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ37512. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ37512 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     CAA to cause a denial of service. IBM X-Force ID: 220394. (CVE-2022-22350)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 213076. (CVE-2021-38996)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ37355. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ37355 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     CAA to cause a denial of service. IBM X-Force ID: 220394. (CVE-2022-22350)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 213076. (CVE-2021-38996)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ37226. It is, therefore, affected by a vulnerability as referenced in the IJ37226 advisory.

  - In BIND 9.3.0 -> 9.11.35, 9.12.0 -> 9.16.21, and versions 9.9.3-S1 -> 9.11.35-S1 and 9.16.8-S1 ->     9.16.21-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.18 of the BIND     9.17 development branch, exploitation of broken authoritative servers using a flaw in response processing     can cause degradation in BIND resolver performance. The way the lame cache is currently designed makes it     possible for its internal data structures to grow almost infinitely, which may cause significant delays in     client query processing. (CVE-2021-25219)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ36682. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ36682 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     CAA to cause a denial of service. IBM X-Force ID: 220394. (CVE-2022-22350)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 213076. (CVE-2021-38996)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ36596. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ36596 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     CAA to cause a denial of service. IBM X-Force ID: 220394. (CVE-2022-22350)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 213076. (CVE-2021-38996)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ37224. It is, therefore, affected by a vulnerability as referenced in the IJ37224 advisory.

  - In BIND 9.3.0 -> 9.11.35, 9.12.0 -> 9.16.21, and versions 9.9.3-S1 -> 9.11.35-S1 and 9.16.8-S1 ->     9.16.21-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.18 of the BIND     9.17 development branch, exploitation of broken authoritative servers using a flaw in response processing     can cause degradation in BIND resolver performance. The way the lame cache is currently designed makes it     possible for its internal data structures to grow almost infinitely, which may cause significant delays in     client query processing. (CVE-2021-25219)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ37496. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ37496 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     CAA to cause a denial of service. IBM X-Force ID: 220394. (CVE-2022-22350)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 213076. (CVE-2021-38996)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-38955 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-38955 IBM AIX could allow a local user with elevated privileges to cause a denial of service due to a file creation vulnerability in the audit commands.

The version of AIX installed on the remote host is prior to APAR IJ37452. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ37452 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 213073. (CVE-2021-38995)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 213072. (CVE-2021-38994)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ37501. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ37501 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 213073. (CVE-2021-38995)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 213072. (CVE-2021-38994)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ37776. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ37776 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 213073. (CVE-2021-38995)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 213072. (CVE-2021-38994)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ37012. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ37012 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 213073. (CVE-2021-38995)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 213072. (CVE-2021-38994)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ37001. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ37001 advisory.

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 213073. (CVE-2021-38995)

  - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the AIX kernel to cause a denial of service. IBM X-Force ID: 213072. (CVE-2021-38994)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ36805. It is, therefore, affected by a vulnerability as referenced in the IJ36805 advisory.

  - IBM AIX 7.0, 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the lscore command which could lead to code execution. IBM X-Force ID: 212953. (CVE-2021-38991)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ36816. It is, therefore, affected by a vulnerability as referenced in the IJ36816 advisory.

  - IBM AIX 7.0, 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the lscore command which could lead to code execution. IBM X-Force ID: 212953. (CVE-2021-38991)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ36810. It is, therefore, affected by a vulnerability as referenced in the IJ36810 advisory.

  - IBM AIX 7.0, 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the lscore command which could lead to code execution. IBM X-Force ID: 212953. (CVE-2021-38991)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ36806. It is, therefore, affected by a vulnerability as referenced in the IJ36806 advisory.

  - IBM AIX 7.0, 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the lscore command which could lead to code execution. IBM X-Force ID: 212953. (CVE-2021-38991)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ36815. It is, therefore, affected by a vulnerability as referenced in the IJ36815 advisory.

  - IBM AIX 7.0, 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the lscore command which could lead to code execution. IBM X-Force ID: 212953. (CVE-2021-38991)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ36125. It is, therefore, affected by a vulnerability as referenced in the IJ36125 advisory.

  - IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the     mount command which could lead to code execution. IBM X-Force ID: 212952. (CVE-2021-38990)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ35620. It is, therefore, affected by a vulnerability as referenced in the IJ35620 advisory.

  - IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the     mount command which could lead to code execution. IBM X-Force ID: 212952. (CVE-2021-38990)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ35623. It is, therefore, affected by a vulnerability as referenced in the IJ35623 advisory.

  - IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the     mount command which could lead to code execution. IBM X-Force ID: 212952. (CVE-2021-38990)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ35826. It is, therefore, affected by a vulnerability as referenced in the IJ35826 advisory.

  - IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the     mount command which could lead to code execution. IBM X-Force ID: 212952. (CVE-2021-38990)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ35078. It is, therefore, affected by a vulnerability as referenced in the IJ35078 advisory.

  - IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in EFS     to expose sensitive information. IBM X-Force ID: 206085. (CVE-2021-29861)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ33560. It is, therefore, affected by a vulnerability as referenced in the IJ33560 advisory.

  - IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the     libc.a library to expose sensitive information. IBM X-Force ID: 206084. (CVE-2021-29860)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ35673. It is, therefore, affected by a vulnerability as referenced in the IJ35673 advisory.

  - IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the     libc.a library to expose sensitive information. IBM X-Force ID: 206084. (CVE-2021-29860)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ35780. It is, therefore, affected by a vulnerability as referenced in the IJ35780 advisory.

  - IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in EFS     to expose sensitive information. IBM X-Force ID: 206085. (CVE-2021-29861)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ35211. It is, therefore, affected by a vulnerability as referenced in the IJ35211 advisory.

  - IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in EFS     to expose sensitive information. IBM X-Force ID: 206085. (CVE-2021-29861)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ35226. It is, therefore, affected by a vulnerability as referenced in the IJ35226 advisory.

  - IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in EFS     to expose sensitive information. IBM X-Force ID: 206085. (CVE-2021-29861)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ34081. It is, therefore, affected by a vulnerability as referenced in the IJ34081 advisory.

  - IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the     libc.a library to expose sensitive information. IBM X-Force ID: 206084. (CVE-2021-29860)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ34512. It is, therefore, affected by a vulnerability as referenced in the IJ34512 advisory.

  - IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the     libc.a library to expose sensitive information. IBM X-Force ID: 206084. (CVE-2021-29860)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29727 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29727 IBM AIX could allow a local user to exploit a vulnerability in the AIX kernel to cause a denial of service. IBM AIX could allow a non-privileged local user to exploit a vulnerability in the kernel to gain root privileges. IBM AIX could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to cause a denial of service.

The version of OpenSSL installed on the remote AIX host is affected by a denial of service vulnerability.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29741 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29741 IBM AIX could allow a local user to exploit a vulnerability in Korn Shell (ksh) to gain root privileges.

ID	Name	Severity
158662	AIX (IJ37504)	medium
158661	AIX (IJ37403)	medium
158660	AIX (IJ37705)	high
158659	AIX (IJ37778)	medium
158658	AIX (IJ36681)	high
158520	AIX (IJ37225)	medium
158519	AIX (IJ37222)	medium
158518	AIX : Multiple Vulnerabilities (IJ37512)	medium
158517	AIX : Multiple Vulnerabilities (IJ37355)	medium
158516	AIX (IJ37226)	medium
158515	AIX : Multiple Vulnerabilities (IJ36682)	medium
158514	AIX : Multiple Vulnerabilities (IJ36596)	medium
158513	AIX (IJ37224)	medium
158512	AIX : Multiple Vulnerabilities (IJ37496)	medium
158499	AIX 7.3 TL 0 : audit (IJ38121)	medium
158498	AIX 7.2 TL 4 : audit (IJ38115)	medium
158497	AIX 7.1 TL 5 : audit (IJ38113)	medium
158496	AIX 7.2 TL 5 : audit (IJ38119)	medium
158495	AIX 7.2 TL 5 : audit (IJ38117)	medium
158346	AIX : Multiple Vulnerabilities (IJ37452)	medium
158345	AIX : Multiple Vulnerabilities (IJ37501)	medium
158344	AIX : Multiple Vulnerabilities (IJ37776)	medium
158343	AIX : Multiple Vulnerabilities (IJ37012)	medium
158342	AIX : Multiple Vulnerabilities (IJ37001)	medium
156602	AIX (IJ36805)	high
156601	AIX (IJ36816)	high
156600	AIX (IJ36810)	high
156599	AIX (IJ36806)	high
156596	AIX (IJ36815)	high
156556	AIX (IJ36125)	high
156555	AIX (IJ35620)	high
156554	AIX (IJ35623)	high
156553	AIX (IJ35826)	high
155459	AIX (IJ35078)	medium
155458	AIX (IJ33560)	medium
155457	AIX (IJ35673)	medium
155456	AIX (IJ35780)	medium
155455	AIX (IJ35211)	medium
155454	AIX (IJ35226)	medium
155453	AIX (IJ34081)	medium
155452	AIX (IJ34512)	medium
152858	AIX 7.2 TL 4 : kernel (IJ32630)	high
152856	AIX 7.2 TL 3 : kernel (IJ32629)	high
152855	AIX 7.2 TL 5 : kernel (IJ32631)	high
152854	AIX 7.1 TL 5 : kernel (IJ33318)	high
152700	AIX OpenSSL Advisory : openssl_advisory28.asc	high
152175	AIX 7.2 TL 5 : ksh (IJ30557)	high
152174	AIX 7.2 TL 4 : ksh (IJ31614)	high
152173	AIX 7.1 TL 5 : ksh (IJ31606)	high
152172	AIX 7.2 TL 3 : ksh (IJ32285)	high

Detections

Analytics

AIX Local Security Checks Family for Nessus

medium

medium

high

medium

high

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

high

high

high

high

high

high

high

high

high

medium

medium

medium

medium

medium

medium

medium

medium

high

high

high

high

high

high

high

high

high