Description
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information due to an integer underflow in the IPv4 IP-options parser.
CVSS breakdown
CVSS 3.1
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
High
Availability
High
Affected products
- ibm / aix7.2.0 – 7.2.0
- ibm / aix7.2.5 – 7.2.5.212
- ibm / aix7.3 – 7.3
- ibm / aix7.3.0 – 7.3.0
- ibm / aix7.2 – 7.2
- ibm / powervm_vios4.1 – 4.1
- ibm / powervm_vios4.1.0 – 4.1.0
- ibm / vios4.1.0 – 4.1.0.50
References
Updated 4m ago · 8 sources