The Vigil@nce team watches public vulnerabilities impacting your computers, and then offers security solutions, a vigilance database and tools to fix them.

Computer vulnerabilities of AIX

tcpdump: out-of-bounds memory reading via EXTRACT_32BITS
An attacker can force a read at an invalid address via EXTRACT_32BITS() of tcpdump, in order to trigger a denial of service, or to obtain sensitive information...
bulletinapr2020, CVE-2018-14466, CVE-2018-19325-REJECT, DLA-1955-1, DLA-1967-1, DSA-2019-168, DSA-2019-169, DSA-4547-1, FEDORA-2019-6db0d5b9d9, FEDORA-2019-85d92df70f, FEDORA-2019-b92ce3144a, FEDORA-2019-d06bc63433, FEDORA-2019-eaa681d33e, HT210788, K04367730, K44551633, K56551263, K86252029, openSUSE-SU-2019:2343-1, openSUSE-SU-2019:2344-1, openSUSE-SU-2019:2345-1, openSUSE-SU-2019:2348-1, SSA:2019-274-01, SUSE-SU-2019:14191-1, SUSE-SU-2019:2669-1, SUSE-SU-2019:2674-1, USN-4221-1, USN-4221-2, USN-4252-1, USN-4252-2, VIGILANCE-VUL-31803
Eclipse OpenJ9: privilege escalation via Diagnostic Operations
An attacker can bypass restrictions via Diagnostic Operations of Eclipse OpenJ9, in order to escalate his privileges...
1288366, CVE-2019-17631, RHSA-2019:4113-01, RHSA-2019:4115-01, RHSA-2020:0046-01, SUSE-SU-2020:0001-1, SUSE-SU-2020:0024-1, VIGILANCE-VUL-31093
tcpdump/libpcap: multiple vulnerabilities
An attacker can use several vulnerabilities of tcpdump/libpcap...
bulletinapr2020, cpuapr2020, CVE-2018-10103, CVE-2018-10105, CVE-2018-14461, CVE-2018-14462, CVE-2018-14463, CVE-2018-14464, CVE-2018-14465, CVE-2018-14466, CVE-2018-14467, CVE-2018-14468, CVE-2018-14469, CVE-2018-14470, CVE-2018-14879, CVE-2018-14880, CVE-2018-14881, CVE-2018-14882, CVE-2018-16227, CVE-2018-16228, CVE-2018-16229, CVE-2018-16230, CVE-2018-16300, CVE-2018-16301-REJECT, CVE-2018-16451, CVE-2018-16452, CVE-2019-15161, CVE-2019-15162, CVE-2019-15163, CVE-2019-15164, CVE-2019-15165, DLA-1955-1, DLA-1967-1, DSA-2019-168, DSA-2019-169, DSA-4547-1, FEDORA-2019-6db0d5b9d9, FEDORA-2019-85d92df70f, FEDORA-2019-b92ce3144a, FEDORA-2019-d06bc63433, FEDORA-2019-eaa681d33e, HT210788, K04367730, K44551633, K56551263, K86252029, openSUSE-SU-2019:2343-1, openSUSE-SU-2019:2344-1, openSUSE-SU-2019:2345-1, openSUSE-SU-2019:2348-1, SSA:2019-274-01, SUSE-SU-2019:14191-1, SUSE-SU-2019:2669-1, SUSE-SU-2019:2674-1, USN-4221-1, USN-4221-2, USN-4252-1, USN-4252-2, VIGILANCE-VUL-30492
tcpdump: out-of-bounds memory reading
An attacker can force a read at an invalid address of tcpdump, in order to trigger a denial of service, or to obtain sensitive information...
bulletinapr2020, CVE-2019-15166, CVE-2019-15167, DLA-1955-1, DSA-4547-1, FEDORA-2019-6db0d5b9d9, FEDORA-2019-85d92df70f, FEDORA-2019-d06bc63433, HT210788, K04367730, K44551633, K56551263, K86252029, openSUSE-SU-2019:2344-1, openSUSE-SU-2019:2348-1, PROJ-ZERO-1724, SSA:2019-274-01, SUSE-SU-2019:14191-1, SUSE-SU-2019:2674-1, USN-4252-1, USN-4252-2, VIGILANCE-VUL-30472
OpenSSL: information disclosure via PKCS7/CMS Padding Oracle
An attacker can bypass access restrictions to data via PKCS7/CMS Padding Oracle of OpenSSL, in order to obtain sensitive information...
1137844, 1172266, 1172278, 3456663, 5695611, 5695629, 5695653, 5695851, 6199286, 6201879, CERTFR-2019-AVI-444, cpuapr2020, cpuoct2019, CVE-2019-1563, DLA-1932-1, DSA-2019-201, DSA-2020-062, DSA-4539-1, DSA-4539-2, DSA-4539-3, DSA-4540-1, NTAP-20190919-0002, openSUSE-SU-2019:2158-1, openSUSE-SU-2019:2189-1, openSUSE-SU-2019:2268-1, openSUSE-SU-2019:2269-1, RHSA-2020:1840-01, SSA:2019-254-03, STORM-2019-018, SUSE-SU-2019:14171-1, SUSE-SU-2019:14174-1, SUSE-SU-2019:2397-1, SUSE-SU-2019:2403-1, SUSE-SU-2019:2410-1, SUSE-SU-2019:2413-1, SUSE-SU-2019:2504-1, SUSE-SU-2019:2558-1, SUSE-SU-2019:2561-1, SUSE-SU-2020:0099-1, USN-4376-1, USN-4376-2, VIGILANCE-VUL-30293
OpenSSL: information disclosure via ECDSA Falls Back
An attacker can bypass access restrictions to data via ECDSA Falls Back of OpenSSL, in order to obtain sensitive information...
1137844, 1172266, 1172278, 5695611, 5695629, 5695653, 5695851, 6199286, 6201879, CERTFR-2019-AVI-444, cpuapr2020, cpujan2020, cpuoct2019, CVE-2019-1547, DLA-1932-1, DSA-2019-201, DSA-2020-062, DSA-4539-1, DSA-4539-2, DSA-4539-3, DSA-4540-1, NTAP-20190919-0002, NTAP-20200122-0002, openSUSE-SU-2019:2158-1, openSUSE-SU-2019:2189-1, openSUSE-SU-2019:2268-1, openSUSE-SU-2019:2269-1, RHSA-2020:1840-01, SSA:2019-254-03, SUSE-SU-2019:14171-1, SUSE-SU-2019:14174-1, SUSE-SU-2019:2397-1, SUSE-SU-2019:2403-1, SUSE-SU-2019:2410-1, SUSE-SU-2019:2413-1, SUSE-SU-2019:2504-1, SUSE-SU-2019:2558-1, SUSE-SU-2019:2561-1, SUSE-SU-2020:0099-1, USN-4376-1, USN-4376-2, VIGILANCE-VUL-30291
Eclipse OpenJ9: buffer overflow via String.getBytes
An attacker can trigger a buffer overflow via String.getBytes() of Eclipse OpenJ9, in order to trigger a denial of service, and possibly to run code...
1087227, 6199287, 6199289, CVE-2019-11772, RHSA-2019:2585-01, RHSA-2019:2590-01, RHSA-2019:2592-01, SUSE-SU-2019:2291-1, SUSE-SU-2019:2371-1, VIGILANCE-VUL-30214
Eclipse OpenJ9: privilege escalation via Absolute RPATH
An attacker can bypass restrictions via Absolute RPATH of Eclipse OpenJ9, in order to escalate his privileges...
1072346, 1073908, 1087227, 1101261, 1108107, 1109829, 6199287, 6199289, 967217, CVE-2019-11771, ibm10964780, SUSE-SU-2019:14160-1, SUSE-SU-2019:14188-1, SUSE-SU-2019:2291-1, SUSE-SU-2019:2336-1, SUSE-SU-2019:2371-1, VIGILANCE-VUL-30137
IBM Java: privilege escalation via Absolute RPATH
An attacker can bypass restrictions via Absolute RPATH of IBM Java, in order to escalate his privileges...
1072346, 1073908, 1087227, 1101261, 1108107, 1109829, 6199287, 6199289, 967217, CVE-2019-4473, ibm10964780, SUSE-SU-2019:14160-1, SUSE-SU-2019:14188-1, SUSE-SU-2019:2291-1, SUSE-SU-2019:2336-1, SUSE-SU-2019:2371-1, VIGILANCE-VUL-30136
Eclipse OpenJ9: out-of-bounds memory reading via Loop Versioner
An attacker can force a read at an invalid address via Loop Versioner of Eclipse OpenJ9, in order to trigger a denial of service, or to obtain sensitive information...
1087227, 6199287, 6199289, CVE-2019-11775, RHSA-2019:2494-01, RHSA-2019:2495-01, RHSA-2019:2585-01, RHSA-2019:2590-01, RHSA-2019:2592-01, SUSE-SU-2019:14160-1, SUSE-SU-2019:14188-1, SUSE-SU-2019:2291-1, SUSE-SU-2019:2336-1, SUSE-SU-2019:2371-1, VIGILANCE-VUL-30076
Our database contains other pages. You can request a free trial to read them.

Display information about AIX: