Email

Télécharger un fichier CSV

Ou saisir le contenu CSV

CVEIDS,App,ImpactPerDay,CountVuln,CVSSBase,Exploitability,RemediationLevel,AssetCriticity,VulnRiskScore,SumVulnRiskScore,Technology,OperatingSystems,Title,Solution,Threat,Impact
CVE-2017-3623,App2,$4000000,8,10,0.85,1,0.8,6.800000000000001,54.39999999999999,IBM,AIX 6.1,IBM AIX Solaris Remote Code Execution Vulnerability (solaris_advisory),"The vendor has released fixes to resolve this vulnerability. Refer to AIX solaris_advisory (http://aix.software.ibm.com/aix/efixes/security/solaris_advisory.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  solaris_advisory (http://aix.software.ibm.com/aix/efixes/security/solaris_advisory.asc)","AIX is a series of proprietary Unix operating systems developed and sold by IBM for several of its computer platforms.

There is a vulnerability in Oracle Solaris that affects AIX. 
 Affected Versions: 
AIX 5.3, 6.1, 7.1, 7.2

QID Detection Logic(Authenticated): 
Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.",An attacker can exploit this issue to execute arbitrary code within the context of the target server.
"CVE-2014-5209,CVE-2018-7182,CVE-2018-7183,CVE-2018-7170,CVE-2018-7184,CVE-2018-7185,CVE-2016-1549",App2,$4000000,8,9.8,0.85,1,0.8,6.664000000000001,53.312000000000005,IBM,AIX 6.1,IBM AIX Vulnerabilities in NTP (ntp_advisory10),"The vendor has released fixes to resolve this vulnerability. For more information please refer to AIX NTP Advisory (http://aix.software.ibm.com/aix/efixes/security/ntp_advisory10.asc)
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  ntp_advisory10 (http://aix.software.ibm.com/aix/efixes/security/ntp_advisory10.asc)","AIX is a series of proprietary Unix operating systems developed and sold by IBM for several of its computer platforms.

There are multiple vulnerabilities in NTPv3 and NTPv4 that impact AIX.

Affected Platforms: 
AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2

APAR versions: 
IJ06657, IJ06651, IJ06652, IJ06653, IJ06654, IJ06655, IJ06656

QID Detection Logic(Authenticated): 
Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.",Successful exploitation can allow an attacker to cause unauthorized modification and application crash denial of service.
"CVE-2018-2964,CVE-2018-2973,CVE-2018-2940,CVE-2018-2952,CVE-2018-1656,CVE-2018-12539,CVE-2018-1517,CVE-2016-0705,CVE-2017-3732,CVE-2017-3736,CVE-2018-0705",App2,$4000000,8,9.8,0.85,1,0.8,6.664000000000001,53.312000000000005,IBM,AIX 6.1,"IBM Java SDK Multiple Vulnerabilities (Oracle July 17 2018 CPU (1.6.0_201, 1.7.0_191, 1.8.0_181))","Latest service refresh packs are available at  IBM SDK, Java Technology Edition Download (https://developer.ibm.com/javasdk/downloads/).  
Refer to Oracle April 17 2018 CPU  (https://developer.ibm.com/javasdk/support/security-vulnerabilities/#Oracle_July_17_2018_CPU) and ibm10719653  (https://www-01.ibm.com/support/docview.wss?uid=ibm10719653)  to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  ibm10719653: IBM Java SDK and JRE (https://www-01.ibm.com/support/docview.wss?uid=ibm10719653)  Oracle July 17 2018 CPU (1.6.0_201, 1.7.0_191, 1.8.0_181): IBM Java SDK and JRE (https://developer.ibm.com/javasdk/support/security-vulnerabilities/#Oracle_July_17_2018_CPU)"," IBM Java SDK are prone to multiple vulnerabilities that can be exploited by malicious people to disclose certain sensitive information, manipulate certain data, bypass certain security restrictions, cause a denial of service and compromise a vulnerable system.

Affected Versions: 
IBM Java SDK prior to 6.0.16.70 
IBM Java SDK prior to 6.1.8.70  
IBM Java SDK prior to 7.0.10.30  
IBM Java SDK prior to 7.1.4.30  
IBM Java SDK prior to 8.0.5.20

QID Detection Logic (Authenticated): 
The QID  runs ""java -version"" command to check if vulnerable IBM Java is installed on the system.",Successful exploitation allows attacker to compromise the system.
"CVE-2017-10345,CVE-2017-10295,CVE-2017-10281,CVE-2017-10350,CVE-2017-10347,CVE-2017-10349,CVE-2017-10348,CVE-2017-10357,CVE-2017-10355,CVE-2017-10356,CVE-2017-10309,CVE-2017-10388,CVE-2017-10285,CVE-2017-10346,CVE-2016-10165,CVE-2017-10165",App2,$4000000,8,9.6,0.85,1,0.8,6.5280000000000005,52.224,IBM,AIX 6.1,IBM AIX Java Multiple Vulnerabilities (java_oct2017_advisory),"The vendor has released fixes to resolve this vulnerability. Refer to AIX java_oct2017_advisory (http://aix.software.ibm.com/aix/efixes/security/java_oct2017_advisory.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  java_oct2017_advisory (https://www-945.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~WebSphere&product=ibm/IBM+SDKs+for+Java+Technology/Java+Standard+Edition+%28Java+SE%29&release=6.0.0.0&platform=AIX+32-bit,+pSeries&function=all)","There are multiple vulnerabilities in IBM SDK Java Technology Edition,
 Versions 6, 7, 7.1, 8 that are used by AIX. These issues were disclosed
 as part of the IBM Java SDK updates in October 2017.
Affected Versions:  
AIX 5.3, 6.1, 7.1, 7.2

Note:The detection requires root privileges to run ""emgr -c"" or ""instfix -k"" to check for patches. In absence of such privileges, the detection may not output actual results.","Successful exploitation allows remote attackers to affect confidentiality, integrity, and availability impact."
CVE-2021-3156,App2,$4000000,8,7.8,1,1,0.8,6.24,49.92000000000001,Others,AIX 6.1,Sudo Heap-based Buffer Overflow Vulnerability (Baron Samedit) (Generic),"Upgrade to 1.9.5p2 or apply the patch from your distribution vendor.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  Sudo Downloads (https://www.sudo.ws/download.html)","sudo is a program for Unix-like computer operating systems that allows users to run programs with the security privileges of another user, by default the superuser. 
We discovered a heap-based buffer overflow in Sudo (CVE-2021-3156) and developed three different exploits for this vulnerability, and obtained full root privileges on Ubuntu. It has been given the name Baron Samedit. The bug can be leveraged to elevate privileges to root, even if the user is not listed in the sudoers file.
 Affected Versions: 
all legacy versions from 1.8.2 to 1.8.31p2
all stable versions from 1.9.0 to 1.9.5p1

QID Detection: (Authenticated) - Linux 
This QID executes the commands ""sudo -V 2>1 | grep -i version"" ,""sudoedit -s /"" and ""sudo -V 2>1 | grep -i version"". If any of these commands is executed, then the QID checks for Sudo version from the command outputs.",A low privilege local attacker may exploit this vulnerability to obtained full root privileges.
"CVE-2018-2579,CVE-2018-2582,CVE-2018-2588,CVE-2018-2599,CVE-2018-2602,CVE-2018-2603,CVE-2018-2618,CVE-2018-2629,CVE-2018-2633,CVE-2018-2634,CVE-2018-2637,CVE-2018-2638,CVE-2018-2639,CVE-2018-2641,CVE-2018-2657,CVE-2018-2663,CVE-2018-2677,CVE-2018-2678",App2,$4000000,8,8.3,0.85,1,0.8,5.644000000000001,45.152,IBM,AIX 6.1,"IBM Java SDK Multiple Vulnerabilities (Oracle January 16 2018 CPU (1.6.0_181, 1.7.0_171, 1.8.0_161))","Latest service refresh packs are available at Java for AIX Download page (http://www.ibm.com/developerworks/java/jdk/aix/service.html). Refer to Oracle January 16 2018 CPU  (https://developer.ibm.com/javasdk/support/security-vulnerabilities/#Oracle_January_16_2018_CPU) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  Oracle January 16 2018 CPU (1.6.0_181, 1.7.0_171, 1.8.0_161): IBM Java SDK and JRE (https://developer.ibm.com/javasdk/support/security-vulnerabilities/#Oracle_January_16_2018_CPU)","IBM Java SDK and JRE are prone to multiple vulnerabilities that can be exploited by malicious people to disclose certain sensitive information, manipulate certain data, bypass certain security restrictions, cause a denial of service and compromise a vulnerable system. Affected Versions: IBM Java SDK and JRE prior to 6.0.16.60 IBM Java SDK and JRE prior to 6.1.8.60 IBM Java SDK and JRE prior to 7.0.10.20 IBM Java SDK and JRE prior to 7.1.4.20 IBM Java SDK and JRE prior to 8.0.5.10 
 QID Detection Logic (Authenticated): 
The QID checks runs ""java -version"" command to check if vulnerable IBM Java is installed on the system",Successful exploitation allows attacker to compromise the system.
"CVE-2018-2814,CVE-2018-2794,CVE-2018-2783,CVE-2018-2799,CVE-2018-2798,CVE-2018-2797,CVE-2018-2796,CVE-2018-2795,CVE-2018-2800,CVE-2018-2790",App2,$4000000,8,8.3,0.85,1,0.8,5.644000000000001,45.152,IBM,AIX 6.1,"IBM Java SDK Multiple Vulnerabilities (Oracle April 17 2018 CPU (1.6.0_191, 1.7.0_181, 1.8.0_171))","Latest service refresh packs are available at  IBM SDK, Java Technology Edition Download (https://developer.ibm.com/javasdk/downloads/).  
Refer to Oracle April 17 2018 CPU  (https://developer.ibm.com/javasdk/support/security-vulnerabilities/#Oracle_April_17_2018_CPU) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  Oracle April 17 2018 CPU (1.6.0_191, 1.7.0_181, 1.8.0_171): IBM Java SDK and JRE (https://developer.ibm.com/javasdk/support/security-vulnerabilities/#Oracle_April_17_2018_CPU)"," IBM Java SDK and JRE are prone to multiple vulnerabilities that can be exploited by malicious people to disclose certain sensitive information, manipulate certain data, bypass certain security restrictions, cause a denial of service and compromise a vulnerable system.
 Affected Versions: 
IBM Java SDK and JRE prior to 6.0.16.65 
IBM Java SDK and JRE prior to 6.1.8.65 
IBM Java SDK and JRE prior to 7.0.10.25 
IBM Java SDK and JRE prior to 7.1.4.25 
IBM Java SDK and JRE prior to 8.0.5.15 
 QID Detection Logic (Authenticated): 
The QID  runs ""java -version"" command to check if vulnerable IBM Java is installed on the system.",Successful exploitation allows attacker to compromise the system.
CVE-2014-3956,App2,$4000000,8,7.5,0.85,1,0.8,5.1000000000000005,40.800000000000004,IBM,AIX 6.1,IBM AIX Sendmail File Descriptor Security Vulnerability (sendmail_advisory3),"The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory (http://aix.software.ibm.com/aix/efixes/security/sendmail_advisory3.asc) to obtain more information
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  sendmail_advisory3: AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2 (https://aix.software.ibm.com/aix/efixes/security/sendmail_fix3.tar)","AIX is prone to the following vulnerabilities:   The sm_close_on_exec function in conf.c in sendmail before 
        8.14.9 has arguments in the wrong order, and consequently skips 
        setting expected FD_CLOEXEC flags, which allows local users to access 
        unintended high-numbered file descriptors via a custom mail-delivery 
        program.    Affected Platforms: AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2 Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results. 
APAR versions: IJ03273, IJ02915, IJ02917, IJ03121, IJ02918, IJ02919, IJ02920   
 
QID Detection Logic (Authenticated): 
The detection checks for installed packages version via command : - ""lslpp -L"".  
It also checks for interim fixes installed using the command ""emgr -c"" or ""instfix -k"". 
The detection posts vulnerable if installed package version is less than patched version and interim fixes are also not installed.",An attacker may exploit this issue to perform unauthorized actions in the context of the application.
CVE-2021-4104,App2,$4000000,8,7.5,0.85,1,0.8,5.1000000000000005,40.800000000000004,Apache,AIX 6.1,Apache Log4j 1.2 Remote Code Execution Vulnerability,"Customers are advised to upgrade their Log4j to the version in 2.16. If updating the version is not possible, please refer to the mitigations mentioned here Log4j (https://logging.apache.org/log4j/2.x/security.html). Workaround: Audit your logging configuration to ensure it has no JMSAppender configured. Log4j 1.2 configurations without JMSAppender are not impacted by this vulnerability. 
Log4j 1.x does not have Lookups, so the risk is lower. Applications using Log4j 1.x are only vulnerable to this attack when they use JNDI in their configuration.","Apache Log4j is a Java-based logging utility. It is part of the Apache Logging Services, a project of the Apache Software Foundation. 
The JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration. 
 The attacker can provide TopicBindingName and TopicConnectionFactoryBindingName configurations causing JMSAppender to perform JNDI requests that result in remote code execution in a similar fashion to CVE-2021-44228.

Affected versions: 
Log4j version 1.2

QID Detection: (Authenticated) - Linux 
This detection is based on querying the OS package managers on the target. If the target has a log4j package with a version in 1.2, the target is flagged as potentially vulnerable.

QID Detection: (Authenticated) - Windows 
On Windows system, the QID identifies vulnerable instance of log4j via WMI to check log4j included in the running processes via command-line.",Successful exploitation of this vulnerability could lead to  remote code execution (RCE) on the target.
CVE-2018-14665,App2,$4000000,8,6.6,0.85,1,0.8,4.4879999999999995,35.903999999999996,IBM,AIX 6.1,IBM AIX Xorg Privilege Escalation Vulnerability(xorg_advisory3),"The vendor has released fixes to resolve this vulnerability. Refer to AIX xorg_advisory3 (http://aix.software.ibm.com/aix/efixes/security/xorg_advisory3.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  xorg_advisory3 (http://aix.software.ibm.com/aix/efixes/security/xorg_advisory3.asc)"," X.Org X server could allow a remote authenticated attacker to gain elevated privileges on the system, caused by improper validation of command line parameters.

Affected Versions:  
AIX 6.1, 7.1, 7.2

Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.

QID Detection Logic (Authenticated):  
The detection checks for installed packages version via command: - ""lslpp -L"". It also checks for interim fixes installed using the command ""emgr -c"" or ""instfix -k"". The detection posts vulnerable if installed package version is less than patched version and interim fixes are also not installed.",An attacker could exploit this vulnerability using the -modulepath argument or the -logfile argument to overwrite arbitrary files and execute unprivileged code on the system.
CVE-2017-3623,App10,$75000,5,10,0.85,1,0.8,6.800000000000001,34,IBM,AIX 6.1,IBM AIX Solaris Remote Code Execution Vulnerability (solaris_advisory),"The vendor has released fixes to resolve this vulnerability. Refer to AIX solaris_advisory (http://aix.software.ibm.com/aix/efixes/security/solaris_advisory.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  solaris_advisory (http://aix.software.ibm.com/aix/efixes/security/solaris_advisory.asc)","AIX is a series of proprietary Unix operating systems developed and sold by IBM for several of its computer platforms.

There is a vulnerability in Oracle Solaris that affects AIX. 
 Affected Versions: 
AIX 5.3, 6.1, 7.1, 7.2

QID Detection Logic(Authenticated): 
Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.",An attacker can exploit this issue to execute arbitrary code within the context of the target server.
"CVE-2014-5209,CVE-2018-7182,CVE-2018-7183,CVE-2018-7170,CVE-2018-7184,CVE-2018-7185,CVE-2016-1549",App10,$75000,5,9.8,0.85,1,0.8,6.664000000000001,33.32,IBM,AIX 6.1,IBM AIX Vulnerabilities in NTP (ntp_advisory10),"The vendor has released fixes to resolve this vulnerability. For more information please refer to AIX NTP Advisory (http://aix.software.ibm.com/aix/efixes/security/ntp_advisory10.asc)
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  ntp_advisory10 (http://aix.software.ibm.com/aix/efixes/security/ntp_advisory10.asc)","AIX is a series of proprietary Unix operating systems developed and sold by IBM for several of its computer platforms.

There are multiple vulnerabilities in NTPv3 and NTPv4 that impact AIX.

Affected Platforms: 
AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2

APAR versions: 
IJ06657, IJ06651, IJ06652, IJ06653, IJ06654, IJ06655, IJ06656

QID Detection Logic(Authenticated): 
Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.",Successful exploitation can allow an attacker to cause unauthorized modification and application crash denial of service.
"CVE-2018-2964,CVE-2018-2973,CVE-2018-2940,CVE-2018-2952,CVE-2018-1656,CVE-2018-12539,CVE-2018-1517,CVE-2016-0705,CVE-2017-3732,CVE-2017-3736,CVE-2018-0705",App10,$75000,5,9.8,0.85,1,0.8,6.664000000000001,33.32,IBM,AIX 6.1,"IBM Java SDK Multiple Vulnerabilities (Oracle July 17 2018 CPU (1.6.0_201, 1.7.0_191, 1.8.0_181))","Latest service refresh packs are available at  IBM SDK, Java Technology Edition Download (https://developer.ibm.com/javasdk/downloads/).  
Refer to Oracle April 17 2018 CPU  (https://developer.ibm.com/javasdk/support/security-vulnerabilities/#Oracle_July_17_2018_CPU) and ibm10719653  (https://www-01.ibm.com/support/docview.wss?uid=ibm10719653)  to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  ibm10719653: IBM Java SDK and JRE (https://www-01.ibm.com/support/docview.wss?uid=ibm10719653)  Oracle July 17 2018 CPU (1.6.0_201, 1.7.0_191, 1.8.0_181): IBM Java SDK and JRE (https://developer.ibm.com/javasdk/support/security-vulnerabilities/#Oracle_July_17_2018_CPU)"," IBM Java SDK are prone to multiple vulnerabilities that can be exploited by malicious people to disclose certain sensitive information, manipulate certain data, bypass certain security restrictions, cause a denial of service and compromise a vulnerable system.

Affected Versions: 
IBM Java SDK prior to 6.0.16.70 
IBM Java SDK prior to 6.1.8.70  
IBM Java SDK prior to 7.0.10.30  
IBM Java SDK prior to 7.1.4.30  
IBM Java SDK prior to 8.0.5.20

QID Detection Logic (Authenticated): 
The QID  runs ""java -version"" command to check if vulnerable IBM Java is installed on the system.",Successful exploitation allows attacker to compromise the system.
"CVE-2021-2464,CVE-2022-21498,CVE-2022-21449,CVE-2022-21476,CVE-2022-21426,CVE-2022-21496,CVE-2022-21434,CVE-2022-21443,CVE-2022-23990,CVE-2022-23852,CVE-2022-21411",App10,$75000,5,9.8,0.85,1,0.8,6.664000000000001,33.32,Oracle,AIX 6.1,Oracle Database 12.1.0.2 Critical Patch Update - April 2022 (Unauthenticated),"Customers are requested to refer to CPUAPR2022 (https://support.oracle.com/rs?type=doc&id=2844795.1) to obtain details about how to deploy the update. 
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  CPUAPR2022 (https://support.oracle.com/rs?type=doc&id=2844795.1)","Oracle Database quarterly patches are proactive cumulative patches containing recommended bug fixes that are released on a regular schedule. 
Affected Software: 
Oracle Database 12.1.0.2 
QID Detection Logic (Unauthenticated): 
This QID connects the remote server's Oracle listener and reviews the Oracle banner version.",Successful exploitation could allow an attacker to compromise the database.
"CVE-2021-2464,CVE-2022-21498,CVE-2022-21449,CVE-2022-21476,CVE-2022-21426,CVE-2022-21496,CVE-2022-21434,CVE-2022-21443,CVE-2022-23990,CVE-2022-23852,CVE-2022-21411",App2,$2500000,5,9.8,0.85,1,0.8,6.664000000000001,33.32,Oracle,AIX 6.1,Oracle Database 12.1.0.2 Critical Patch Update - April 2022 (Unauthenticated),"Customers are requested to refer to CPUAPR2022 (https://support.oracle.com/rs?type=doc&id=2844795.1) to obtain details about how to deploy the update. 
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  CPUAPR2022 (https://support.oracle.com/rs?type=doc&id=2844795.1)","Oracle Database quarterly patches are proactive cumulative patches containing recommended bug fixes that are released on a regular schedule. 
Affected Software: 
Oracle Database 12.1.0.2 
QID Detection Logic (Unauthenticated): 
This QID connects the remote server's Oracle listener and reviews the Oracle banner version.",Successful exploitation could allow an attacker to compromise the database.
CVE-2021-41035,App2,$2500000,5,9.8,0.85,1,0.8,6.664000000000001,33.32,IBM,AIX 6.1,IBM Java Software Development Kit (SDK) Security Vulnerability (IBM Security Update November 2021),"Latest service refresh packs are available at  IBM SDK, Java Technology Edition Download (https://developer.ibm.com/javasdk/downloads/).  
Refer to IBM Security Update November 2021  (https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities#Oracle_November_2021) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  IJ35976 (https://www.ibm.com/support/pages/apar/IJ35976)","Eclipse Openj9 could provide weaker than expected security, caused by the failure to throw IllegalAccessError for MethodHandles that invoke inaccessible interface methods.

Affected Versions: 
IBM Java SDK  Prior to  7.0.11.0 
IBM Java SDK Prior to 7.1.5.0  
IBM Java SDK Prior to 8.0.7.0

QID Detection Logic (Authenticated): 
The QID  runs ""java -version"" command to check if vulnerable IBM Java is installed on the system.","Successful exploitation of this vulnerability may affect the Confidentiality, Integrity and availability.."
"CVE-2022-21511,CVE-2020-26185,CVE-2022-21432,CVE-2022-21510,CVE-2022-21565,CVE-2020-26184,CVE-2020-35169,CVE-2022-21541,CVE-2022-21540",App10,$75000,5,9.8,0.85,1,0.8,6.664000000000001,33.32,Oracle,AIX 6.1,Oracle Database 12.1.0.2 Critical Patch Update - July 2022 (Unauthenticated),"Customers are requested to refer to CPUJUL2022 (https://support.oracle.com/rs?type=doc&id=2867871.1) to obtain details about how to deploy the update. 
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  CPUJUL2022 (https://www.oracle.com/security-alerts/cpujul2022.html)","Oracle Database quarterly patches are proactive cumulative patches containing recommended bug fixes that are released on a regular schedule. 
Affected Software: 
Oracle Database 12.1.0.2 
QID Detection Logic (Unauthenticated): 
This QID connects the remote server's Oracle listener and reviews the Oracle banner version.",Successful exploitation could allow an attacker to compromise the database.
"CVE-2022-21511,CVE-2020-26185,CVE-2022-21432,CVE-2022-21510,CVE-2022-21565,CVE-2020-26184,CVE-2020-35169,CVE-2022-21541,CVE-2022-21540",App2,$2500000,5,9.8,0.85,1,0.8,6.664000000000001,33.32,Oracle,AIX 6.1,Oracle Database 12.1.0.2 Critical Patch Update - July 2022 (Unauthenticated),"Customers are requested to refer to CPUJUL2022 (https://support.oracle.com/rs?type=doc&id=2867871.1) to obtain details about how to deploy the update. 
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  CPUJUL2022 (https://www.oracle.com/security-alerts/cpujul2022.html)","Oracle Database quarterly patches are proactive cumulative patches containing recommended bug fixes that are released on a regular schedule. 
Affected Software: 
Oracle Database 12.1.0.2 
QID Detection Logic (Unauthenticated): 
This QID connects the remote server's Oracle listener and reviews the Oracle banner version.",Successful exploitation could allow an attacker to compromise the database.
"CVE-2017-10345,CVE-2017-10295,CVE-2017-10281,CVE-2017-10350,CVE-2017-10347,CVE-2017-10349,CVE-2017-10348,CVE-2017-10357,CVE-2017-10355,CVE-2017-10356,CVE-2017-10309,CVE-2017-10388,CVE-2017-10285,CVE-2017-10346,CVE-2016-10165,CVE-2017-10165",App10,$75000,5,9.6,0.85,1,0.8,6.5280000000000005,32.64,IBM,AIX 6.1,IBM AIX Java Multiple Vulnerabilities (java_oct2017_advisory),"The vendor has released fixes to resolve this vulnerability. Refer to AIX java_oct2017_advisory (http://aix.software.ibm.com/aix/efixes/security/java_oct2017_advisory.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  java_oct2017_advisory (https://www-945.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~WebSphere&product=ibm/IBM+SDKs+for+Java+Technology/Java+Standard+Edition+%28Java+SE%29&release=6.0.0.0&platform=AIX+32-bit,+pSeries&function=all)","There are multiple vulnerabilities in IBM SDK Java Technology Edition,
 Versions 6, 7, 7.1, 8 that are used by AIX. These issues were disclosed
 as part of the IBM Java SDK updates in October 2017.
Affected Versions:  
AIX 5.3, 6.1, 7.1, 7.2

Note:The detection requires root privileges to run ""emgr -c"" or ""instfix -k"" to check for patches. In absence of such privileges, the detection may not output actual results.","Successful exploitation allows remote attackers to affect confidentiality, integrity, and availability impact."
CVE-2021-3156,App10,$75000,5,7.8,1,1,0.8,6.24,31.200000000000003,Others,AIX 6.1,Sudo Heap-based Buffer Overflow Vulnerability (Baron Samedit) (Generic),"Upgrade to 1.9.5p2 or apply the patch from your distribution vendor.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  Sudo Downloads (https://www.sudo.ws/download.html)","sudo is a program for Unix-like computer operating systems that allows users to run programs with the security privileges of another user, by default the superuser. 
We discovered a heap-based buffer overflow in Sudo (CVE-2021-3156) and developed three different exploits for this vulnerability, and obtained full root privileges on Ubuntu. It has been given the name Baron Samedit. The bug can be leveraged to elevate privileges to root, even if the user is not listed in the sudoers file.
 Affected Versions: 
all legacy versions from 1.8.2 to 1.8.31p2
all stable versions from 1.9.0 to 1.9.5p1

QID Detection: (Authenticated) - Linux 
This QID executes the commands ""sudo -V 2>1 | grep -i version"" ,""sudoedit -s /"" and ""sudo -V 2>1 | grep -i version"". If any of these commands is executed, then the QID checks for Sudo version from the command outputs.",A low privilege local attacker may exploit this vulnerability to obtained full root privileges.
"CVE-2018-3139,CVE-2018-3136,CVE-2018-13785,CVE-2018-3214,CVE-2018-3180,CVE-2018-3149,CVE-2018-3169,CVE-2018-3183",App2,$2500000,5,9,0.85,1,0.8,6.12,30.6,IBM,AIX 6.1,IBM AIX Java Multiple Vulnerabilities(java_oct2018_advisory),"The vendor has released fixes to resolve this vulnerability. Refer to AIX java_oct2018_advisory (http://aix.software.ibm.com/aix/efixes/security/java_oct2018_advisory.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  java_oct2018_advisory (http://aix.software.ibm.com/aix/efixes/security/java_oct2018_advisory.asc)","There are multiple vulnerabilities in IBM SDK Java Technology Edition,Versions 7, 7.1, 8 that are used by AIX. These issues were disclosed as part of the IBM Java SDK updates in October 2018.

Affected Versions: 
AIX 6.1
AIX 7.1
AIX 7.2

Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.

QID Detection Logic (Authenticated): 
The detection checks for installed packages version via command : - ""lslpp -L"". 
It also checks for interim fixes installed using the command ""emgr -c"" or ""instfix -k"".
The detection posts vulnerable if installed package version is less than patched version and interim fixes are also not installed.","Successful exploitation allows remote attackers to affect confidentiality, integrity, and availability impact."
CVE-2018-1655,App2,$4000000,8,5.5,0.85,1,0.8,3.74,29.92000000000001,IBM,AIX 6.1,IBM AIX rmsock Information Disclosure Vulnerability (rmsock_advisory2),"The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory (http://aix.software.ibm.com/aix/efixes/security/rmsock_advisory2.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  rmsock_advisory2 (http://aix.software.ibm.com/aix/efixes/security/rmsock_advisory2.asc.sig)","IBM AIX contains a vulnerability in the rmsock command that may be used to expose kernel memory..   Affected Platforms: AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2 Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results. 
APAR versions: IJ06905, IJ06906, IJ06904, IJ06934, IJ06907, IJ06908  
 
QID Detection Logic (Authenticated): 
The detection checks for installed packages version via command : - ""lslpp -L"".  
It also checks for interim fixes installed using the command ""emgr -c"" or ""instfix -k"". 
The detection posts vulnerable if installed package version is less than patched version and interim fixes are also not installed.",A local user can exploit an unspecified flaw in the 'rmsock' command to obtain potentially sensitive information from kernel memory on the target system.
CVE-2018-3639,App2,$4000000,8,5.5,0.85,1,0.8,3.74,29.92000000000001,IBM,AIX 6.1,IBM AIX Speculative Store Bypass (SSB) or Variant 4 Vulnerability (variant4_advisory),"The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory (http://aix.software.ibm.com/aix/efixes/security/variant4_advisory.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  variant4_advisory (https://aix.software.ibm.com/aix/efixes/security/variant4_advisory.asc.sig)","IBM has released AIX Fixes in response to Speculative Store Bypass (SSB), also known as Variant 4.   Affected Platforms: AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2 Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results. 
APAR versions: IJ05826, IJ05824, IJ05823, IJ05822, IJ05821, IJ05820, IJ05818   
 
QID Detection Logic (Authenticated): 
The detection checks for installed packages version via command : - ""lslpp -L"".  
It also checks for interim fixes installed using the command ""emgr -c"" or ""instfix -k"". 
The detection posts vulnerable if installed package version is less than patched version and interim fixes are also not installed.",An attacker may exploit this issue to perform unauthorized actions in the context of the application.
CVE-2017-15906,App2,$4000000,8,5.3,0.85,1,0.8,3.604,28.831999999999997,IBM,AIX 6.1,IBM AIX OpenSSH Vulnerability (openssh_advisory11),"The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory openssh_advisory11 (http://aix.software.ibm.com/aix/efixes/security/openssh_advisory11.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  AIX Advisory openssh_advisory11: AIX 5.3, 6.1, 7.1 and 7.2 (OpenSSH) (https://www-01.ibm.com/marketing/iwm/iwm/web/reg/download.do?source=aixbp&lang=en_US&S_PKG=openssh&cp=UTF-8)","IBM AIX is prone to the following vulnerability:
 
The process_open function in sftp-server.c in OpenSSH does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files.(CVE-2017-15906)
 
Affected Platforms: 
AIX 5.3, 6.1, 7.1 and 7.2

QID Detection Logic(Authenticated)  
It checks for vulnerable versions of OpenSSH in IBM AIX.",Successful exploitation allows attackers to create zero-length files.
CVE-2018-15473,App2,$4000000,8,5.3,0.85,1,0.8,3.604,28.831999999999997,IBM,AIX 6.1,IBM AIX OpenSSH Vulnerability (openssh_advisory12),"The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory openssh_advisory11 (http://aix.software.ibm.com/aix/efixes/security/openssh_advisory12.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  openssh_advisory12 (http://aix.software.ibm.com/aix/efixes/security/openssh_advisory12.asc)","Vulnerability in OpenSSH affects AIX.
OpenSSH is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed. 
OpenSSH could allow a remote attacker to obtain sensitive information, caused by different responses to valid and invalid authentication attempts. By sending a specially crafted request, an attacker could exploit this vulnerability to enumerate valid usernames.

Affected Platforms: 
AIX 5.3, 6.1, 7.1 and 7.2

QID Detection Logic(Authenticated)  
It checks for vulnerable versions of OpenSSH in IBM AIX.","By sending a specially crafted request, an attacker could exploit this vulnerability to enumerate valid usernames."
CVE-2018-6922,App2,$4000000,8,5.3,0.85,1,0.8,3.604,28.831999999999997,IBM,AIX 6.1,IBM AIX FreeBSD Denial of Service Vulnerability(freebsd_advisory),"The vendor has released fixes to resolve this vulnerability. Refer to AIX freebsd_advisory (http://aix.software.ibm.com/aix/efixes/security/freebsd_advisory.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  freebsd_advisory (http://aix.software.ibm.com/aix/efixes/security/freebsd_advisory.asc)"," FreeBSD is vulnerable to a denial of service, caused by the use of an inefficient TCP reassembly algorithm. By sending specially-crafted TCP traffic, a remote attacker could exploit this vulnerability to consume all available CPU resources.

Affected Versions: 
AIX 5.3, 6.1, 7.1, 7.2

Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.

QID Detection Logic (Authenticated): 
The detection checks for installed packages version via command : - ""lslpp -L"". 
It also checks for interim fixes installed using the command ""emgr -c"" or ""instfix -k"".
The detection posts vulnerable if installed package version is less than patched version and interim fixes are also not installed.",A remote attacker could exploit this vulnerability to consume all available CPU resources.
"CVE-2018-1517,CVE-2018-1656,CVE-2018-2973,CVE-2018-2952,CVE-2018-2940,CVE-2018-2964,CVE-2018-12539",App2,$2500000,5,8.3,0.85,1,0.8,5.644000000000001,28.220000000000006,IBM,AIX 6.1,IBM AIX Java Multiple Vulnerabilities(java_july2018_advisory),"The vendor has released fixes to resolve this vulnerability. Refer to AIX java_july2018_advisory (http://aix.software.ibm.com/aix/efixes/security/java_july2018_advisory.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  java_july2018_advisory (http://aix.software.ibm.com/aix/efixes/security/java_july2018_advisory.asc)","There are multiple vulnerabilities in IBM SDK Java Technology Edition,Versions 7, 7.1, 8 that are used by AIX. These issues were disclosed as part of the IBM Java SDK updates in July 2018.

Affected Versions: 
AIX 5.3, 6.1, 7.1, 7.2

QID Detection Logic (Authenticated): 
The detection checks for installed packages version via command: - ""lslpp -L"".","Successful exploitation allows remote attackers to affect confidentiality, integrity, and availability impact."
"CVE-2018-2579,CVE-2018-2582,CVE-2018-2588,CVE-2018-2599,CVE-2018-2602,CVE-2018-2603,CVE-2018-2618,CVE-2018-2629,CVE-2018-2633,CVE-2018-2634,CVE-2018-2637,CVE-2018-2638,CVE-2018-2639,CVE-2018-2641,CVE-2018-2657,CVE-2018-2663,CVE-2018-2677,CVE-2018-2678",App10,$75000,5,8.3,0.85,1,0.8,5.644000000000001,28.220000000000006,IBM,AIX 6.1,"IBM Java SDK Multiple Vulnerabilities (Oracle January 16 2018 CPU (1.6.0_181, 1.7.0_171, 1.8.0_161))","Latest service refresh packs are available at Java for AIX Download page (http://www.ibm.com/developerworks/java/jdk/aix/service.html). Refer to Oracle January 16 2018 CPU  (https://developer.ibm.com/javasdk/support/security-vulnerabilities/#Oracle_January_16_2018_CPU) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  Oracle January 16 2018 CPU (1.6.0_181, 1.7.0_171, 1.8.0_161): IBM Java SDK and JRE (https://developer.ibm.com/javasdk/support/security-vulnerabilities/#Oracle_January_16_2018_CPU)","IBM Java SDK and JRE are prone to multiple vulnerabilities that can be exploited by malicious people to disclose certain sensitive information, manipulate certain data, bypass certain security restrictions, cause a denial of service and compromise a vulnerable system. Affected Versions: IBM Java SDK and JRE prior to 6.0.16.60 IBM Java SDK and JRE prior to 6.1.8.60 IBM Java SDK and JRE prior to 7.0.10.20 IBM Java SDK and JRE prior to 7.1.4.20 IBM Java SDK and JRE prior to 8.0.5.10 
 QID Detection Logic (Authenticated): 
The QID checks runs ""java -version"" command to check if vulnerable IBM Java is installed on the system",Successful exploitation allows attacker to compromise the system.
"CVE-2018-2579,CVE-2018-2588,CVE-2018-2663,CVE-2018-2677,CVE-2018-2678,CVE-2018-2602,CVE-2018-2599,CVE-2018-2603,CVE-2018-2657,CVE-2018-2618,CVE-2018-2641,CVE-2018-2582,CVE-2018-2634,CVE-2018-2637,CVE-2018-2633,CVE-2018-2638,CVE-2018-2639,CVE-2018-1417",App2,$2500000,5,8.3,0.85,1,0.8,5.644000000000001,28.220000000000006,IBM,AIX 6.1,IBM AIX Java Multiple Vulnerabilities(java_jan2018_advisory),"The vendor has released fixes to resolve this vulnerability. Refer to AIX java_jan2018_advisory (http://aix.software.ibm.com/aix/efixes/security/java_jan2018_advisory.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  java_jan2018_advisory (http://aix.software.ibm.com/aix/efixes/security/java_jan2018_advisory.asc)","There are multiple vulnerabilities in IBM SDK Java Technology Edition,Versions 7, 7.1, 8 that are used by AIX. These issues were disclosed as part of the IBM Java SDK updates in January 2018.

Affected Versions: 
AIX 5.3, 6.1, 7.1, 7.2

QID Detection Logic (Authenticated): 
The detection checks for installed packages version via command: - ""lslpp -L"".","Successful exploitation allows remote attackers to affect confidentiality, integrity, and availability impact."
"CVE-2018-2814,CVE-2018-2794,CVE-2018-2783,CVE-2018-2799,CVE-2018-2798,CVE-2018-2797,CVE-2018-2796,CVE-2018-2795,CVE-2018-2800,CVE-2018-2790",App10,$75000,5,8.3,0.85,1,0.8,5.644000000000001,28.220000000000006,IBM,AIX 6.1,"IBM Java SDK Multiple Vulnerabilities (Oracle April 17 2018 CPU (1.6.0_191, 1.7.0_181, 1.8.0_171))","Latest service refresh packs are available at  IBM SDK, Java Technology Edition Download (https://developer.ibm.com/javasdk/downloads/).  
Refer to Oracle April 17 2018 CPU  (https://developer.ibm.com/javasdk/support/security-vulnerabilities/#Oracle_April_17_2018_CPU) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  Oracle April 17 2018 CPU (1.6.0_191, 1.7.0_181, 1.8.0_171): IBM Java SDK and JRE (https://developer.ibm.com/javasdk/support/security-vulnerabilities/#Oracle_April_17_2018_CPU)"," IBM Java SDK and JRE are prone to multiple vulnerabilities that can be exploited by malicious people to disclose certain sensitive information, manipulate certain data, bypass certain security restrictions, cause a denial of service and compromise a vulnerable system.
 Affected Versions: 
IBM Java SDK and JRE prior to 6.0.16.65 
IBM Java SDK and JRE prior to 6.1.8.65 
IBM Java SDK and JRE prior to 7.0.10.25 
IBM Java SDK and JRE prior to 7.1.4.25 
IBM Java SDK and JRE prior to 8.0.5.15 
 QID Detection Logic (Authenticated): 
The QID  runs ""java -version"" command to check if vulnerable IBM Java is installed on the system.",Successful exploitation allows attacker to compromise the system.
"CVE-2020-14621,CVE-2020-14593,CVE-2020-14583,CVE-2020-14579,CVE-2020-14578,CVE-2020-14577,CVE-2020-14556,CVE-2020-17639,CVE-2020-2601,CVE-2020-2590,CVE-2020-14581,CVE-2019-17639",App2,$2500000,5,8.3,0.85,1,0.8,5.644000000000001,28.220000000000006,IBM,AIX 6.1,"IBM Java SDK Multiple Vulnerabilities(Oracle July 14 2020 CPU (1.7.0_271, 1.8.0_261))","Latest service refresh packs are available at  IBM SDK, Java Technology Edition Download (https://developer.ibm.com/javasdk/downloads/).  
Refer to Oracle July 14 2020 CPU  (https://www.ibm.com/support/pages/node/6256562) 
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  IBM Java SDK(Oracle July 14 2020 CPU (1.7.0_271, 1.8.0_261)) (https://developer.ibm.com/javasdk/support/security-vulnerabilities/#Oracle_April_18_2017_CPU)","IBM Java SDK are prone to multiple vulnerabilities. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data.

Affected Versions: 
Prior to 7.0.10.70 
Prior to 7.1.4.70 
Prior to  8.0.6.15

QID Detection Logic (Authenticated): 
The QID  runs java -version; command to check if vulnerable IBM Java is installed on the system.","Successful exploitation could allow attacker to gain unauthorized update, insert or delete access."
"CVE-2018-2800,CVE-2018-2795,CVE-2018-2796,CVE-2018-2797,CVE-2018-2798,CVE-2018-2799,CVE-2018-2783,CVE-2018-2794,CVE-2018-2790",App2,$2500000,5,7.7,0.85,1,0.8,5.236000000000001,26.180000000000003,IBM,AIX 6.1,IBM AIX Java Multiple Vulnerabilities(java_apr2018_advisory),"The vendor has released fixes to resolve this vulnerability. Refer to AIX java_apr2018_advisory (http://aix.software.ibm.com/aix/efixes/security/java_apr2018_advisory.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  java_apr2018_advisory (http://aix.software.ibm.com/aix/efixes/security/java_apr2018_advisory.asc)","There are multiple vulnerabilities in IBM SDK Java Technology Edition,Versions 7, 7.1, 8 that are used by AIX. These issues were disclosed as part of the IBM Java SDK updates in April 2018.

Affected Versions: 
AIX 5.3, 6.1, 7.1, 7.2

QID Detection Logic (Authenticated): 
The detection checks for installed packages version via command: - ""lslpp -L"".","Successful exploitation allows remote attackers to affect confidentiality, integrity, and availability impact."
CVE-2014-3956,App10,$75000,5,7.5,0.85,1,0.8,5.1000000000000005,25.500000000000004,IBM,AIX 6.1,IBM AIX Sendmail File Descriptor Security Vulnerability (sendmail_advisory3),"The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory (http://aix.software.ibm.com/aix/efixes/security/sendmail_advisory3.asc) to obtain more information
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  sendmail_advisory3: AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2 (https://aix.software.ibm.com/aix/efixes/security/sendmail_fix3.tar)","AIX is prone to the following vulnerabilities:   The sm_close_on_exec function in conf.c in sendmail before 
        8.14.9 has arguments in the wrong order, and consequently skips 
        setting expected FD_CLOEXEC flags, which allows local users to access 
        unintended high-numbered file descriptors via a custom mail-delivery 
        program.    Affected Platforms: AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2 Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results. 
APAR versions: IJ03273, IJ02915, IJ02917, IJ03121, IJ02918, IJ02919, IJ02920   
 
QID Detection Logic (Authenticated): 
The detection checks for installed packages version via command : - ""lslpp -L"".  
It also checks for interim fixes installed using the command ""emgr -c"" or ""instfix -k"". 
The detection posts vulnerable if installed package version is less than patched version and interim fixes are also not installed.",An attacker may exploit this issue to perform unauthorized actions in the context of the application.
CVE-2018-0732,App2,$2500000,5,7.5,0.85,1,0.8,5.1000000000000005,25.500000000000004,IBM,AIX 6.1,IBM Advanced Interactive eXecutive (AIX) Open Secure Sockets Layer (OpenSSL) Transport Layer Security (TLS) Handshake Denial Of Service (DoS) Vulnerability (openssl_advisory28),"The vendor has released fixes to resolve this vulnerability. Refer to AIX openssl_advisory28 (http://aix.software.ibm.com/aix/efixes/security/openssl_advisory28.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  openssl_advisory28 (http://aix.software.ibm.com/aix/efixes/security/openssl_advisory28.asc)","OpenSSL is vulnerable to a denial of service, caused by the sending of a very large prime value to the client by a malicious server during key agreement in a TLS handshake. By spending an unreasonably long period of time generating a key for this prime, a remote attacker could exploit this vulnerability to cause the client to hang.

Affected Platforms: 
AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2  
 Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.

QID Detection Logic (Authenticated): 
The detection checks for installed packages version via command : - ""lslpp -L"".  
It also checks for interim fixes installed using the command ""emgr -c"" or ""instfix -k"". 
The detection posts vulnerable if installed package version is less than patched version and interim fixes are also not installed.",A remote attacker could exploit this vulnerability to cause the client to hang.
"CVE-2021-35560,CVE-2021-35586,CVE-2021-35578,CVE-2021-35564,CVE-2021-35559,CVE-2021-35556,CVE-2021-35565,CVE-2021-35588",App2,$2500000,5,7.5,0.85,1,0.8,5.1000000000000005,25.500000000000004,IBM,AIX 6.1,"IBM Java Software Development Kit (SDK) Multiple Vulnerabilities (Oracle October 19 2021 CPU (1.7.0_321, 1.8.0_311))","Latest service refresh packs are available at  IBM SDK, Java Technology Edition Download (https://developer.ibm.com/javasdk/downloads/).  
Refer to Oracle October 19 2021 CPU  (https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities#Oracle_October_19_2021_CPU) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  IBM Java SDK(Oracle October 19 2021 CPU (1.7.0_321, 1.8.0_311)) (https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities#Oracle_October_19_2021_CPU)","IBM Java SDK are prone to multiple vulnerabilities that can be exploited by malicious people to disclose certain sensitive information, manipulate certain data, bypass certain security restrictions, cause a denial of service and compromise a vulnerable system.

Affected Versions: 
IBM Java SDK prior to 7.0.11.0  
IBM Java SDK prior to 7.1.5.0  
IBM Java SDK prior to 8.0.7.0

NOTE:  
CVE-2021-35560 and CVE-2021-35578 are affected to IBM Java 8 only.

QID Detection Logic (Authenticated): 
The QID  runs ""java -version"" command to check if vulnerable IBM Java is installed on the system.","Successful exploitation of these vulnerabilities may affect the Confidentiality, Integrity and Availability."
CVE-2021-4104,App10,$75000,5,7.5,0.85,1,0.8,5.1000000000000005,25.500000000000004,Apache,AIX 6.1,Apache Log4j 1.2 Remote Code Execution Vulnerability,"Customers are advised to upgrade their Log4j to the version in 2.16. If updating the version is not possible, please refer to the mitigations mentioned here Log4j (https://logging.apache.org/log4j/2.x/security.html). Workaround: Audit your logging configuration to ensure it has no JMSAppender configured. Log4j 1.2 configurations without JMSAppender are not impacted by this vulnerability. 
Log4j 1.x does not have Lookups, so the risk is lower. Applications using Log4j 1.x are only vulnerable to this attack when they use JNDI in their configuration.","Apache Log4j is a Java-based logging utility. It is part of the Apache Logging Services, a project of the Apache Software Foundation. 
The JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration. 
 The attacker can provide TopicBindingName and TopicConnectionFactoryBindingName configurations causing JMSAppender to perform JNDI requests that result in remote code execution in a similar fashion to CVE-2021-44228.

Affected versions: 
Log4j version 1.2

QID Detection: (Authenticated) - Linux 
This detection is based on querying the OS package managers on the target. If the target has a log4j package with a version in 1.2, the target is flagged as potentially vulnerable.

QID Detection: (Authenticated) - Windows 
On Windows system, the QID identifies vulnerable instance of log4j via WMI to check log4j included in the running processes via command-line.",Successful exploitation of this vulnerability could lead to  remote code execution (RCE) on the target.
CVE-2018-14665,App10,$75000,5,6.6,0.85,1,0.8,4.4879999999999995,22.439999999999998,IBM,AIX 6.1,IBM AIX Xorg Privilege Escalation Vulnerability(xorg_advisory3),"The vendor has released fixes to resolve this vulnerability. Refer to AIX xorg_advisory3 (http://aix.software.ibm.com/aix/efixes/security/xorg_advisory3.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  xorg_advisory3 (http://aix.software.ibm.com/aix/efixes/security/xorg_advisory3.asc)"," X.Org X server could allow a remote authenticated attacker to gain elevated privileges on the system, caused by improper validation of command line parameters.

Affected Versions:  
AIX 6.1, 7.1, 7.2

Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.

QID Detection Logic (Authenticated):  
The detection checks for installed packages version via command: - ""lslpp -L"". It also checks for interim fixes installed using the command ""emgr -c"" or ""instfix -k"". The detection posts vulnerable if installed package version is less than patched version and interim fixes are also not installed.",An attacker could exploit this vulnerability using the -modulepath argument or the -logfile argument to overwrite arbitrary files and execute unprivileged code on the system.
CVE-2018-0739,App2,$2500000,5,6.5,0.85,1,0.8,4.42,22.1,IBM,AIX 6.1,IBM Advanced Interactive eXecutive (AIX) Open Secure Sockets Layer (OpenSSL) Denial of Service (DoS) Vulnerability (openssl_advisory26),"The vendor has released fixes to resolve this vulnerability. Refer to AIX openssl_advisory26 (http://aix.software.ibm.com/aix/efixes/security/openssl_advisory26.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  openssl_advisory26 (https://aix.software.ibm.com/aix/efixes/security/openssl_fix26.tar)","OpenSSL is prone to a denial-of-service vulnerability. 
 OpenSSL could allow a remote attacker to cause a denial-of-service condition, caused by a flaw in the Constructed ASN.1 types with a recursive definition (such as can be found in PKCS7) that could eventually exceed the stack given malicious input with excessive recursion. (CVE-2017-3737)

Affected Versions:  
AIX 5.3,6.1, 7.1, 7.2 
 
Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.

QID Detection Logic (Authenticated): 
The detection checks for installed packages version via command : - ""lslpp -L"".  
It also checks for interim fixes installed using the command ""emgr -c"". 
The detection posts vulnerable if installed package version is less than patched version and interim fixes are also not installed.",An attacker can exploit this issue to cause a denial-of-service condition.
CVE-2017-3623,App3,$900000,3,10,0.85,1,0.8,6.800000000000001,20.400000000000002,IBM,AIX 6.1,IBM AIX Solaris Remote Code Execution Vulnerability (solaris_advisory),"The vendor has released fixes to resolve this vulnerability. Refer to AIX solaris_advisory (http://aix.software.ibm.com/aix/efixes/security/solaris_advisory.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  solaris_advisory (http://aix.software.ibm.com/aix/efixes/security/solaris_advisory.asc)","AIX is a series of proprietary Unix operating systems developed and sold by IBM for several of its computer platforms.

There is a vulnerability in Oracle Solaris that affects AIX. 
 Affected Versions: 
AIX 5.3, 6.1, 7.1, 7.2

QID Detection Logic(Authenticated): 
Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.",An attacker can exploit this issue to execute arbitrary code within the context of the target server.
CVE-2017-3737,App2,$2500000,5,5.9,0.85,1,0.8,4.0120000000000005,20.060000000000002,IBM,AIX 6.1,IBM Advanced Interactive eXecutive (AIX) Open Secure Sockets Layer (OpenSSL) Security Bypass Vulnerability (openssl_advisory25),"The vendor has released fixes to resolve this vulnerability. Refer to AIX openssl_advisory25 (http://aix.software.ibm.com/aix/efixes/security/openssl_advisory25.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  openssl_advisory25 (https://aix.software.ibm.com/aix/efixes/security/openssl_fix25.tar)","OpenSSL is prone to a security-bypass vulnerability. 
 OpenSSL could allow a remote attacker to bypass security restrictions, caused by a flaw in the ""error state"" mechanism when directly calling SSL_read() or SSL_write() for an SSL object after receiving a fatal error. An attacker could exploit this vulnerability       to bypass the decryption or encryption process and perform unauthorized actions. (CVE-2017-3737)

Affected Versions:  
AIX 5.3,6.1, 7.1, 7.2 
 
Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.

QID Detection Logic (Authenticated): 
The detection checks for installed packages version via command : - ""lslpp -L"".  
It also checks for interim fixes installed using the command ""emgr -c"". 
The detection posts vulnerable if installed package version is less than patched version and interim fixes are also not installed.",Successfully exploiting this issue will allow attackers to bypass security restrictions and perform unauthorized actions; this may aid in launching further attacks.
"CVE-2018-0734,CVE-2018-5407",App2,$2500000,5,5.9,0.85,1,0.8,4.0120000000000005,20.060000000000002,IBM,AIX 6.1,IBM Advanced Interactive eXecutive (AIX) Open Secure Sockets Layer (OpenSSL) Multiple Security Vulnerabilities (openssl_advisory29),"The vendor has released fixes to resolve this vulnerability. Refer to AIX openssl_advisory29 (http://aix.software.ibm.com/aix/efixes/security/openssl_advisory29.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  openssl_advisory29 (https://aix.software.ibm.com/aix/efixes/security/openssl_advisory29.asc)","Multiple Security vulnerabilities are detected in OpenSSL.
CVE-2018-0734: OpenSSL could allow a remote attacker to obtain sensitive information, caused by a timing side channel attack in the DSA signature algorithm.

CVE-2018-5407(PortSmash): Multiple SMT/Hyper-Threading architectures and processors could allow a local attacker to obtain sensitive information, caused by execution engine sharing on Simultaneous Multithreading (SMT) architecture.

Affected Platforms: 
AIX 5.3
AIX 6.1
AIX 7.1
AIX 7.2

Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.

QID Detection Logic (Authenticated): 
The detection checks for installed packages version via command : - ""lslpp -L"".  
It also checks for interim fixes installed using the command ""emgr -c"" or ""instfix -k"". 
The detection posts vulnerable if installed package version is less than patched version and interim fixes are also not installed.","An attacker could exploit this vulnerability using variations in the signing algorithm to recover the private key. 
An attacker could run a malicious process next to legitimate processes using the architectures parallel thread running capabilities to leak encrypted data from the CPU's internal processes."
CVE-2018-0737,App2,$2500000,5,5.9,0.85,1,0.8,4.0120000000000005,20.060000000000002,IBM,AIX 6.1,IBM Advanced Interactive eXecutive (AIX) Open Secure Sockets Layer (OpenSSL) Side Channel Attack Information Disclosure Vulnerability (openssl_advisory27),"The vendor has released fixes to resolve this vulnerability. Refer to AIX openssl_advisory27 (http://aix.software.ibm.com/aix/efixes/security/openssl_advisory27.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  openssl_advisory27 (https://www14.software.ibm.com/webapp/iwm/web/preLogin.do?source=aixbp)","The OpenSSL RSA Key generation algorithm is vulnerable to a cache timing side channel attack.  
A local user that can conduct a cache timing side channel attack against the RSA key generation algorithm's BN_mod_inverse() and BN_mod_exp_mont() functions may be able to recover the private key. Affected Platforms: AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2 Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.
 
QID Detection Logic (Authenticated): 
The detection checks for installed packages version via command : - ""lslpp -L"".  
It also checks for interim fixes installed using the command ""emgr -c"" or ""instfix -k"". 
The detection posts vulnerable if installed package version is less than patched version and interim fixes are also not installed.",An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could recover the private key.
"CVE-2014-5209,CVE-2018-7182,CVE-2018-7183,CVE-2018-7170,CVE-2018-7184,CVE-2018-7185,CVE-2016-1549",App3,$900000,3,9.8,0.85,1,0.8,6.664000000000001,19.992,IBM,AIX 6.1,IBM AIX Vulnerabilities in NTP (ntp_advisory10),"The vendor has released fixes to resolve this vulnerability. For more information please refer to AIX NTP Advisory (http://aix.software.ibm.com/aix/efixes/security/ntp_advisory10.asc)
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  ntp_advisory10 (http://aix.software.ibm.com/aix/efixes/security/ntp_advisory10.asc)","AIX is a series of proprietary Unix operating systems developed and sold by IBM for several of its computer platforms.

There are multiple vulnerabilities in NTPv3 and NTPv4 that impact AIX.

Affected Platforms: 
AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2

APAR versions: 
IJ06657, IJ06651, IJ06652, IJ06653, IJ06654, IJ06655, IJ06656

QID Detection Logic(Authenticated): 
Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.",Successful exploitation can allow an attacker to cause unauthorized modification and application crash denial of service.
"CVE-2016-0800,CVE-2016-0798,CVE-2016-0702,CVE-2016-0705,CVE-2016-0799,CVE-2016-0797",App2,$1500000,3,9.8,0.85,1,0.8,6.664000000000001,19.992,IBM,AIX 6.1,IBM AIX OpenSSL Multiple Vulnerabilities,"The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory (http://aix.software.ibm.com/aix/efixes/security/openssl_advisory18.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  IBM AIX OpenSSL Multiple Vulnerabilities : AIX 5.3, 6.1, 7.1, 7.2 (https://www14.software.ibm.com/webapp/iwm/web/preLogin.do?source=aixbp)","AIX is prone to the following vulnerabilities: A cross-protocol attack was discovered that could lead to 
	    decryption of TLS sessions by using a server supporting 
	    SSLv2 and EXPORT cipher suites as a Bleichenbacher RSA 
	    padding oracle. This vulnerability is known as DROWN.
 
The fmtstr function improperly calculates string lengths, 
	    which allows remote attackers to cause a denial of service 
	    (overflow and out-of-bounds read) or possibly have 
	    unspecified other impact via a long string.
 
An attacker with an invalid username connecting to SRP 
	    servers that is configured with a secret seed to hide 
	    valid login information are vulnerable to a memory leak 
	    of around 300 bytes per connection.
 
Multiple integer overflows allow remote attackers to cause
	    a denial of service (heap memory corruption or NULL pointer 
	    dereference) or possibly have unspecified other impact via 
	    a long digit string that is mishandled by the BN_dec2bn or 
	    BN_hex2bn function.
 
A double free bug was discovered when OpenSSL parses 
	    malformed DSA private keys and could lead to a DoS attack 
	    or memory corruption for applications that receive DSA 
	    private keys from untrusted sources.
 
A side-channel attack was found which makes use of cache-bank 
	    conflicts on the Intel Sandy-Bridge microarchitecture which 
	    could lead to the recovery of RSA keys.
 Affected Platforms: AIX 5.3, 6.1, 7.1, 7.2
 Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results. APAR versions: IV83169m9b,IV83169m9a,IV83169s9d,IV83169m9c",Exploitation could lead to buffer overflow or disclosure of sensitive information.
"CVE-2016-2176,CVE-2016-2109,CVE-2016-2108,CVE-2016-2106,CVE-2016-2105",App2,$1500000,3,9.8,0.85,1,0.8,6.664000000000001,19.992,IBM,AIX 6.1,IBM AIX OpenSSL Multiple Vulnerabilities,"The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory (http://aix.software.ibm.com/aix/efixes/security/openssl_advisory20.asc) to obtain more information
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  openssl_advisory20.asc: AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2 (ftp://aix.software.ibm.com/aix/efixes/security/openssl_advisory20.asc.sig)","AIX is prone to the following vulnerabilities: 
 OpenSSL could allow a remote attacker to obtain sensitive information, by sending an overly long ASN.1 string to the X509_NAME_oneline() function. (CVE-2016-2176) 
OpenSSL could allow a remote attacker to execute arbitrary code on the system, caused by a buffer underflow when deserializing untrusted ASN.1 structures and later reserializes them. (CVE-2016-2108) 
OpenSSL is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by the EVP_EncryptUpdate() function. (CVE-2016-2105, CVE-2016-2106) 
 Affected Platforms: AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2 Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.",An attacker could exploit this vulnerability to consume all available resources and exhaust memory.
"CVE-2016-2177,CVE-2016-2178,CVE-2016-2179,CVE-2016-2180,CVE-2016-2181,CVE-2016-2182,CVE-2016-2183,CVE-2016-6302,CVE-2016-6303,CVE-2016-6304,CVE-2016-6306,CVE-2016-7052",App2,$1500000,3,9.8,0.85,1,0.8,6.664000000000001,19.992,IBM,AIX 6.1,IBM AIX OpenSSL Multiple Vulnerabilities (openssl_advisory21),"The vendor has released fixes to resolve this vulnerability. Refer to AIX openssl_advisory21 (http://aix.software.ibm.com/aix/efixes/security/openssl_advisory21.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  AIX openssl_advisory21: AIX 5.3, 6.1, 7.1 and 7.2 (OpenSSL) (https://www14.software.ibm.com/webapp/iwm/web/preLogin.do?source=aixbp)","AIX is prone to the following vulnerabilities: 
 OpenSSL is vulnerable to a denial of service, caused by the incorrect use of pointer arithmetic for heap-buffer boundary checks.(CVE-2016-2177) 
OpenSSL could allow a remote attacker to obtain sensitive information, caused by an error in the DSA implementation that allows the following of a non-constant time codepath for certain operations. (CVE-2016-2178) 
OpenSSL is vulnerable to a denial of service. By sending specially crafted DTLS record fragments to fill up buffer queues, a remote attacker could exploit this vulnerability to open a large number of simultaneous connections and consume all available memory resources. (CVE-2016-2179) 
OpenSSL is vulnerable to a denial of service, caused by an out-of-bounds read in the TS_OBJ_print_bio function.(CVE-2016-2180) 
OpenSSL is vulnerable to a denial of service, caused by an error in the DTLS replay protection implementation.(CVE-2016-2181) 
OpenSSL is vulnerable to a denial of service, caused by an out-of-bounds write in the TS_OBJ_print_bio function in crypto/bn/bn_print.c. (CVE-2016-2182) 
OpenSSL could allow a remote attacker to obtain sensitive information, caused by an error in the in the Triple-DES on 64-bit block cipher, used as a part of the SSL/TLS protocol. (CVE-2016-2183) 
OpenSSL is vulnerable to a denial of service, caused by the failure to consider the HMAC size during validation of the ticket length by the tls_decrypt_ticket function. (CVE-2016-6302) 
OpenSSL is vulnerable to a denial of service, caused by an integer overflow in the MDC2_Update function.(CVE-2016-6303) 
OpenSSL is vulnerable to a denial of service. By repeatedly requesting renegotiation, a remote authenticated attacker could send an overly large OCSP Status Request extension to consume all available memory resources. (CVE-2016-6304) 
OpenSSL is vulnerable to a denial of service, caused by missing message length checks when parsing certificates. (CVE-2016-6306) 
OpenSSL is vulnerable to a denial of service, caused by a missing CRL sanity check. By attempting to use CRLs, a remote attacker could exploit this vulnerability to cause the application to crash. (CVE-2016-7052)
 Affected Platforms: AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2

Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.",An attacker could exploit this vulnerability to consume all available resources and exhaust memory.
CVE-2016-2842,App2,$1500000,3,9.8,0.85,1,0.8,6.664000000000001,19.992,IBM,AIX 6.1,IBM AIX OpenSSL Denial of Service Vulnerability,"The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory (http://aix.software.ibm.com/aix/efixes/security/openssl_advisory19.asc) to obtain more information
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  IBM AIX OpenSSL Denial of Service Vulnerability: AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2 (ftp://aix.software.ibm.com/aix/efixes/security/openssl_fix18.tar)","AIX is prone to the following vulnerabilities:  OpenSSL is vulnerable to a denial of service, caused by the failure to verify that a certain memory allocation succeeds by the doapr_outch function. A remote attacker could exploit this vulnerability using a specially crafted string to cause an out-of-bounds write or consume an overly large amount of resources.   Affected Platforms: AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2 Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.",A remote attacker could exploit this vulnerability using a specially crafted string to cause an out-of-bounds write or consume an overly large amount of resources.
"CVE-2016-3115,CVE-2016-1908",App2,$1500000,3,9.8,0.85,1,0.8,6.664000000000001,19.992,IBM,AIX 6.1,IBM AIX OpenSSH Remote Code Execution Vulnerability,"The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory (http://aix.software.ibm.com/aix/efixes/security/openssh_advisory8.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  IBM AIX OpenSSH Remote Code Execution Vulnerability: AIX 5.3, 6.1, 7.1, 7.2 (https://aix.software.ibm.com/aix/efixes/security/openssh_fix8.tar)","IBM AIX is prone to the following vulnerabilities:
 
OpenSSH could allow a remote authenticated attacker to
        execute arbitrary commands on the system, caused by improper
        validation of user-supplied X11 authentication credentials by the sshd
        server. By sending specially crafted X11 credential data, an attacker
        could exploit this vulnerability to inject xauth commands and execute
        arbitrary commands on the system with the privileges of the victim.
 
OpenSSH could allow a remote authenticated attacker to bypass
        security restrictions, caused by the improper handling of errors when
        generating authentication cookies for untrusted X11 forwarding. An
        attacker could exploit this vulnerability to gain access to the target
        local X server.
 
Affected Platforms: 
AIX 5.3, 6.1, 7.1 and 7.2
 
Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results. APAR versions: IV84698m9a,IV84698m9b",Exploitation could allow a remote attacker to execute arbitrary code.
"CVE-2016-7922,CVE-2016-7923,CVE-2016-7924,CVE-2016-7925,CVE-2016-7926,CVE-2016-7927,CVE-2016-7928,CVE-2016-7930,CVE-2016-7931,CVE-2016-7932,CVE-2016-7933,CVE-2016-7934,CVE-2016-7935,CVE-2016-7936,CVE-2016-7937,CVE-2016-7939,CVE-2016-7940,CVE-2016-7973,CVE-2016-7974,CVE-2016-7975,CVE-2016-7983,CVE-2016-7984,CVE-2016-7992,CVE-2016-7993,CVE-2016-8574,CVE-2016-8575,CVE-2017-5202,CVE-2017-5203,CVE-2017-5204,CVE-2017-5482,CVE-2017-5483,CVE-2017-5484,CVE-2017-5485,CVE-2017-5486",App2,$1500000,3,9.8,0.85,1,0.8,6.664000000000001,19.992,IBM,AIX 6.1,IBM AIX tcpdump Buffer Overflow Vulnerabilities (tcpdump_advisory2),"The vendor has released fixes to resolve this vulnerability. Refer to AIX tcpdump_advisory2 (http://aix.software.ibm.com/aix/efixes/security/tcpdump_advisory2.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  AIX tcpdump_advisory2: AIX 5.3, 6.1, 7.1, 7.2 (tcpdump) (https://aix.software.ibm.com/aix/efixes/security/tcpdump_fix2.tar )","AIX is prone to the following vulnerabilities:
 
tcpdump is vulnerable to multiple buffer overflow vulnerabilities caused by improper bounds checking by the parser.
 
Affected Platforms: 
AIX 5.3, 6.1, 7.1, 7.2
 Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results. APAR versions: IV94729s9b, IV94728s9c,IV94727s9b,IV94726s4c,IV94724s4b,IV94723s2a",Exploitation might allow a remote attacker to cause the application to crash.
"CVE-2017-10108,CVE-2017-1376,CVE-2017-1541,CVE-2017-10053,CVE-2017-10067,CVE-2017-10078,CVE-2017-10087,CVE-2017-10089,CVE-2017-10090,CVE-2017-10096,CVE-2017-10101,CVE-2017-10102,CVE-2017-10105,CVE-2017-10107,CVE-2017-10109,CVE-2017-10110,CVE-2017-10115,CVE-2017-10116,CVE-2017-10125,CVE-2017-10243",App2,$1500000,3,9.8,0.85,1,0.8,6.664000000000001,19.992,IBM,AIX 6.1,IBM AIX Java Multiple Vulnerabilities (java_july2017_advisory),"The vendor has released fixes to resolve this vulnerability. Refer to AIX java_july2017_advisory (http://aix.software.ibm.com/aix/efixes/security/java_july2017_advisory.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  java_july2017_advisory: AIX (https://aix.software.ibm.com/aix/efixes/security/java_july2017_advisory.asc)","There are multiple vulnerabilities in IBM SDK Java Technology Edition Versions 6, 7, 7.1, 8 that are used by AIX. These issues were disclosed as part of the IBM Java SDK updates in July 2017.
 
Affected Versions:-  
AIX 5.3, 6.1, 7.1, 7.2","Successful exploitation allows remote attackers to affect confidentiality, integrity, and availability impact."
"CVE-2017-13024,CVE-2017-12996,CVE-2017-12995,CVE-2017-13027,CVE-2017-12993,CVE-2017-13021,CVE-2017-13022,CVE-2017-12990,CVE-2017-13028,CVE-2017-13029,CVE-2017-12999,CVE-2017-12998,CVE-2017-13033,CVE-2017-13032,CVE-2017-13031,CVE-2017-13030,CVE-2017-13037,CVE-2017-13036,CVE-2017-13035,CVE-2017-13034,CVE-2017-13039,CVE-2017-13038,CVE-2017-11541,CVE-2017-11543,CVE-2017-11542,CVE-2017-13687,CVE-2017-13725,CVE-2017-13688,CVE-2017-13689,CVE-2017-13046,CVE-2017-13047,CVE-2017-13044,CVE-2017-13045,CVE-2017-13042,CVE-2017-13043,CVE-2017-13040,CVE-2017-13041,CVE-2017-13048,CVE-2017-13049,CVE-2017-12997,CVE-2017-13025,CVE-2017-13026,CVE-2017-12994,CVE-2017-13020,CVE-2017-12992,CVE-2017-13690,CVE-2017-12991,CVE-2017-13023,CVE-2017-13055,CVE-2017-13054,CVE-2017-13051,CVE-2017-13050,CVE-2017-13053,CVE-2017-13052,CVE-2017-12893,CVE-2017-12896,CVE-2017-12897,CVE-2017-12894,CVE-2017-12895,CVE-2017-12898,CVE-2017-12899,CVE-2017-13019,CVE-2017-12989,CVE-2017-12985,CVE-2017-12986,CVE-2017-12987,CVE-2017-13008,CVE-2017-13009,CVE-2017-13002,CVE-2017-13003,CVE-2017-13000,CVE-2017-13001,CVE-2017-13006,CVE-2017-13004,CVE-2017-13005,CVE-2017-12900,CVE-2017-12901,CVE-2017-12902,CVE-2017-12988,CVE-2017-13018,CVE-2017-13011,CVE-2017-13010,CVE-2017-13013,CVE-2017-13012,CVE-2017-13015,CVE-2017-13014,CVE-2017-13017,CVE-2017-13016",App2,$1500000,3,9.8,0.85,1,0.8,6.664000000000001,19.992,IBM,AIX 6.1,IBM AIX tcpdump Multiple Vulnerabilities (tcpdump_advisory3),"The vendor has released fixes to resolve this vulnerability. Refer to AIX tcpdump_advisory3 (http://aix.software.ibm.com/aix/efixes/security/tcpdump_advisory3.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  tcpdump_advisory3: AIX 5.3, 6.1, 7.1, 7.2 (tcpdump) (https://aix.software.ibm.com/aix/efixes/security/tcpdump_fix2.tar )","AIX is prone to the following vulnerabilities:
 
tcpdump is vulnerable to multiple buffer overflow vulnerabilities caused by improper bounds checking by the parser.
 
Affected Platforms: 
AIX 5.3, 6.1, 7.1, 7.2
 Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results. APAR versions:
 IV94728mAa,IV94727m9a,IV94726m5a,IV94724m5a,IV94723m3a,IV94729m9a",Exploitation might allow a remote attacker to cause the application to crash.
"CVE-2017-3514,CVE-2017-3512,CVE-2017-3511,CVE-2017-3509,CVE-2017-3544,CVE-2017-3533,CVE-2017-3539,CVE-2017-1289,CVE-2016-9840,CVE-2016-9841,CVE-2016-9842,CVE-2016-9843",App2,$1500000,3,9.8,0.85,1,0.8,6.664000000000001,19.992,IBM,AIX 6.1,IBM AIX Java Multiple Vulnerabilities (java_apr2017_advisory),"The vendor has released fixes to resolve this vulnerability. Refer to AIX java_apr2017_advisory (http://aix.software.ibm.com/aix/efixes/security/java_apr2017_advisory.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  java_apr2017_advisory (IBM SDK Version 6 ) (https://www-945.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~WebSphere&product=ibm/IBM+SDKs+for+Java+Technology/Java+Standard+Edition+%28Java+SE%29&release=6.0.0.0&platform=AIX+32-bit,+pSeries&function=all)  java_apr2017_advisory (IBM SDK Version 7) (https://www-945.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~WebSphere&product=ibm/IBM+SDKs+for+Java+Technology/Java+Standard+Edition+%28Java+SE%29&release=7.0.0.0&platform=AIX+32-bit,+pSeries&function=all )  java_apr2017_advisory (IBM SDK Version 7R1) (https://www-945.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~WebSphere&product=ibm/IBM+SDKs+for+Java+Technology/Java+Standard+Edition+%28Java+SE%29&release=7.1.0.0&platform=AIX+32-bit,+pSeries&function=all)  java_apr2017_advisory (IBM SDK Version 8) (https://www-945.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~WebSphere&product=ibm/IBM+SDKs+for+Java+Technology/Java+Standard+Edition+%28Java+SE%29&release=8.0.0.0&platform=AIX+32-bit,+pSeries&function=all)","There are multiple vulnerabilities in IBM SDK Java Technology Edition Versions 6, 7, 7.1, 8 that are used by AIX. These issues were disclosed as part of the IBM Java SDK updates in January 2017.
The following vulnerabilities exists in IBM AIX:-  
1. An unspecified vulnerability in Oracle Java SE related to the Java 
SE AWT component could allow an unauthenticated attacker to take control of the 
system. (CVE-2017-3514)  
2. An unspecified vulnerability in Oracle Java SE related to the 
Java SE AWT component could allow an unauthenticated attacker to take control 
of the system.(CVE-2017-3512)  
3. An unspecified vulnerability in Oracle Java SE related to the Java SE, 
Java SE Embedded, JRockit JCE component could allow an unauthenticated attacker to 
take control of the system. (CVE-2017-3511)  
4.  An unspecified vulnerability in Oracle Java SE related to the Java SE, 
Java SE Embedded Networking component could allow an unauthenticated attacker to 
cause low confidentiality impact, low integrity impact, and no availability impact. (CVE-2017-3509)  
5. An unspecified vulnerability in Oracle Java SE related to the Java SE, 
Java SE Embedded, JRockit Networking component could allow an unauthenticated 
attacker to cause no confidentiality impact, low integrity impact, and no availability 
impact.(CVE-2017-3544)  
6. An unspecified vulnerability in Oracle Java SE related to the Java SE, 
Java SE Embedded, JRockit Networking component could allow an unauthenticated 
attacker to cause no confidentiality impact, low integrity impact, and no availability 
impact.(CVE-2017-3533)  
7. An unspecified vulnerability in Oracle Java SE related to the Java SE, 
Java SE Embedded Security component could allow an unauthenticated attacker to cause 
no confidentiality impact, low integrity impact, and no availability impact. (CVE-2017-3539)  
8. IBM SDK, Java Technology Edition is vulnerable XML External Entity Injection 
(XXE) error when processing XML data. A remote attacker could exploit this vulnerability to 
expose highly sensitive information or consume memory resources. (CVE-2017-1289)  
9. zlib is vulnerable to a denial of service, caused by an out-of-bounds pointer 
arithmetic in inftrees.c. By persuading a victim to open a specially crafted document, a 
remote attacker could exploit this vulnerability to cause a denial of service.(CVE-2016-9840 - CVE-2016-9843)

Affected Versions:-  
AIX 5.3, 6.1, 7.1, 7.2","Successful exploitation allows remote attackers to affect confidentiality, integrity, and availability impact."
"CVE-2018-2964,CVE-2018-2973,CVE-2018-2940,CVE-2018-2952,CVE-2018-1656,CVE-2018-12539,CVE-2018-1517,CVE-2016-0705,CVE-2017-3732,CVE-2017-3736,CVE-2018-0705",App3,$900000,3,9.8,0.85,1,0.8,6.664000000000001,19.992,IBM,AIX 6.1,"IBM Java SDK Multiple Vulnerabilities (Oracle July 17 2018 CPU (1.6.0_201, 1.7.0_191, 1.8.0_181))","Latest service refresh packs are available at  IBM SDK, Java Technology Edition Download (https://developer.ibm.com/javasdk/downloads/).  
Refer to Oracle April 17 2018 CPU  (https://developer.ibm.com/javasdk/support/security-vulnerabilities/#Oracle_July_17_2018_CPU) and ibm10719653  (https://www-01.ibm.com/support/docview.wss?uid=ibm10719653)  to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  ibm10719653: IBM Java SDK and JRE (https://www-01.ibm.com/support/docview.wss?uid=ibm10719653)  Oracle July 17 2018 CPU (1.6.0_201, 1.7.0_191, 1.8.0_181): IBM Java SDK and JRE (https://developer.ibm.com/javasdk/support/security-vulnerabilities/#Oracle_July_17_2018_CPU)"," IBM Java SDK are prone to multiple vulnerabilities that can be exploited by malicious people to disclose certain sensitive information, manipulate certain data, bypass certain security restrictions, cause a denial of service and compromise a vulnerable system.

Affected Versions: 
IBM Java SDK prior to 6.0.16.70 
IBM Java SDK prior to 6.1.8.70  
IBM Java SDK prior to 7.0.10.30  
IBM Java SDK prior to 7.1.4.30  
IBM Java SDK prior to 8.0.5.20

QID Detection Logic (Authenticated): 
The QID  runs ""java -version"" command to check if vulnerable IBM Java is installed on the system.",Successful exploitation allows attacker to compromise the system.
"CVE-2021-2464,CVE-2022-21498,CVE-2022-21449,CVE-2022-21476,CVE-2022-21426,CVE-2022-21496,CVE-2022-21434,CVE-2022-21443,CVE-2022-23990,CVE-2022-23852,CVE-2022-21411",App3,$900000,3,9.8,0.85,1,0.8,6.664000000000001,19.992,Oracle,AIX 6.1,Oracle Database 12.1.0.2 Critical Patch Update - April 2022 (Unauthenticated),"Customers are requested to refer to CPUAPR2022 (https://support.oracle.com/rs?type=doc&id=2844795.1) to obtain details about how to deploy the update. 
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  CPUAPR2022 (https://support.oracle.com/rs?type=doc&id=2844795.1)","Oracle Database quarterly patches are proactive cumulative patches containing recommended bug fixes that are released on a regular schedule. 
Affected Software: 
Oracle Database 12.1.0.2 
QID Detection Logic (Unauthenticated): 
This QID connects the remote server's Oracle listener and reviews the Oracle banner version.",Successful exploitation could allow an attacker to compromise the database.
CVE-2021-41035,App10,$45000,3,9.8,0.85,1,0.8,6.664000000000001,19.992,IBM,AIX 6.1,IBM Java Software Development Kit (SDK) Security Vulnerability (IBM Security Update November 2021),"Latest service refresh packs are available at  IBM SDK, Java Technology Edition Download (https://developer.ibm.com/javasdk/downloads/).  
Refer to IBM Security Update November 2021  (https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities#Oracle_November_2021) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  IJ35976 (https://www.ibm.com/support/pages/apar/IJ35976)","Eclipse Openj9 could provide weaker than expected security, caused by the failure to throw IllegalAccessError for MethodHandles that invoke inaccessible interface methods.

Affected Versions: 
IBM Java SDK  Prior to  7.0.11.0 
IBM Java SDK Prior to 7.1.5.0  
IBM Java SDK Prior to 8.0.7.0

QID Detection Logic (Authenticated): 
The QID  runs ""java -version"" command to check if vulnerable IBM Java is installed on the system.","Successful exploitation of this vulnerability may affect the Confidentiality, Integrity and availability.."
"CVE-2022-21511,CVE-2020-26185,CVE-2022-21432,CVE-2022-21510,CVE-2022-21565,CVE-2020-26184,CVE-2020-35169,CVE-2022-21541,CVE-2022-21540",App3,$900000,3,9.8,0.85,1,0.8,6.664000000000001,19.992,Oracle,AIX 6.1,Oracle Database 12.1.0.2 Critical Patch Update - July 2022 (Unauthenticated),"Customers are requested to refer to CPUJUL2022 (https://support.oracle.com/rs?type=doc&id=2867871.1) to obtain details about how to deploy the update. 
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  CPUJUL2022 (https://www.oracle.com/security-alerts/cpujul2022.html)","Oracle Database quarterly patches are proactive cumulative patches containing recommended bug fixes that are released on a regular schedule. 
Affected Software: 
Oracle Database 12.1.0.2 
QID Detection Logic (Unauthenticated): 
This QID connects the remote server's Oracle listener and reviews the Oracle banner version.",Successful exploitation could allow an attacker to compromise the database.
"CVE-2016-3598,CVE-2016-3511,CVE-2016-3485",App2,$1500000,3,9.6,0.85,1,0.8,6.5280000000000005,19.584000000000003,IBM,AIX 6.1,IBM AIX Java Denial of Service Vulnerability,"The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory (http://aix.software.ibm.com/aix/efixes/security/java_july2016_advisory.asc) to obtain more information
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  java_july2016_advisory: AIX 5.3, 6.1, 7.1, 7.2 (https://www-933.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~WebSphere&product=ibm/IBM+SDKs+for+Java+Technology/Java+Standard+Edition+%28Java+SE%29&release=6.0.0.0&platform=AIX+32-bit,+pSeries&function=all)","There are multiple vulnerabilities in IBM SDK Java Technology Edition, Versions 6, 7, 7.1, 8 that are used by AIX.  
AIX is prone to the following vulnerabilities:  
 An unspecified vulnerability in Oracle Java SE and Java SE Embedded related to the Libraries component has high confidentiality impact, high integrity impact, and high availability impact.
 An unspecified vulnerability in Oracle Java SE related to the Deployment component has high confidentiality impact, high integrity impact, and high availability impact.
 An unspecified vulnerability in Oracle Java SE and Java SE Embedded related to the Networking component has no confidentiality impact, low integrity impact, and no availability impact.
 Affected Platforms: AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2
 Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.","Successful exploitation allows remote attackers to cause a denial of service via a malformed packet to the rndc (aka control channel) interface, related to alist.c and sexpr.c."
"CVE-2016-5552,CVE-2017-3231,CVE-2017-3241,CVE-2017-3253,CVE-2017-3259,CVE-2017-3261,CVE-2017-3272,CVE-2016-2183,CVE-2016-5548,CVE-2016-5549,CVE-2017-3252,CVE-2017-3289,CVE-2016-5547,CVE-2016-5546",App2,$1500000,3,9.6,0.85,1,0.8,6.5280000000000005,19.584000000000003,IBM,AIX 6.1,IBM AIX Java Multiple Vulnerabilities (java_jan2017_advisory),"The vendor has released fixes to resolve this vulnerability. Refer to AIX java_jan2017_advisory (http://aix.software.ibm.com/aix/efixes/security/java_jan2017_advisory.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  java_jan2017_advisory: AIX 5.3, 6.1, 7.1 and 7.2 (https://www-933.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~WebSphere&product=ibm/IBM+SDKs+for+Java+Technology/Java+Standard+Edition+%28Java+SE%29&release=8.0.0.0&platform=AIX+32-bit,+pSeries&function=all)","There are multiple vulnerabilities in IBM SDK Java Technology Edition Versions 6, 7, 7.1, 8 that are used by AIX. These issues were disclosed as part of the IBM Java SDK updates in October 2016.
The following vulnerabilities exists in IBM AIX:-  
1. An unspecified vulnerability in Oracle Java SE and Java SE Embedded 
related to the Hotspot component has high confidentiality impact, high integrity
impact, and high availability impact. (CVE-2017-3289)  
2. An unspecified vulnerability in Oracle Java SE and Java SE Embedded
related to the Libraries component has high confidentiality impact, high 
integrity impact, and high availability impact.(CVE-2017-3272)  
3.An unspecified vulnerability in Oracle Java SE Java SE Embedded
and Jrockit related to the RMI component has high confidentiality impact, high
integrity impact, and high availability impact. (CVE-2017-3241)  
4.  An unspecified vulnerability in Oracle Java SE Java SE Embedded and
Jrockit related to the 2D component could allow a remote attacker to cause a 
denial of service resulting in a high availability impact using unknown attack vectors. (CVE-2017-3253)  
5. An unspecified vulnerability in Oracle Java SE Java SE Embedded and 
Jrockit related to the Libraries component has no confidentiality impact, high 
integrity impact, and no availability impact. (CVE-2016-5546)  
6. An unspecified vulnerability in Oracle Java SE and Java SE Embedded
related to the Libraries component could allow a remote attacker to obtain
sensitive information resulting in a high confidentiality impact using unknown 
attack vectors. (CVE-2016-5548)  
7. An unspecified vulnerability in Oracle Java SE and Java SE Embedded
related to the Libraries component could allow a remote attacker to obtain sensitive 
information resulting in a high confidentiality impact using unknown attack vectors.  (CVE-2016-5549)  
8. An unspecified vulnerability in Oracle Java SE Java SE Embedded
and Jrockit related to the JAAS component has no confidentiality impact, 
high integrity impact, and no availability impact. (CVE-2017-3252)  
9. An unspecified vulnerability in Oracle Java SE Java SE Embedded 
and Jrockit related to the Libraries component could allow a remote attacker
to cause a denial of service resulting in a low availability impact using unknown attack vectors.(CVE-2017-5547)

Affected Versions:-  
AIX 5.3, 6.1, 7.1, 7.2","Successful exploitation allows remote attackers to affect confidentiality, integrity, and availability impact."
"CVE-2016-5568,CVE-2016-5556,CVE-2016-5573,CVE-2016-5597,CVE-2016-5554,CVE-2016-5542",App2,$1500000,3,9.6,0.85,1,0.8,6.5280000000000005,19.584000000000003,IBM,AIX 6.1,IBM AIX Java Multiple Vulnerabilities (java_oct2016_advisory),"The vendor has released fixes to resolve this vulnerability. Refer to AIX java_oct2016_advisory (https://aix.software.ibm.com/aix/efixes/security/java_oct2016_advisory.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  java_oct2016_advisory: AIX 5.3, 6.1, 7.1 and 7.2 (Java) (https://www-933.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~WebSphere&product=ibm/IBM+SDKs+for+Java+Technology/Java+Standard+Edition+%28Java+SE%29&release=6.0.0.0&platform=AIX+32-bit,+pSeries&function=all)","There are multiple vulnerabilities in IBM SDK Java Technology Edition Versions 6, 7, 7.1, 8 that are used by AIX. These issues were disclosed as part of the IBM Java SDK updates in October 2016.
The following vulnerabilities exists in IBM AIX:-  
1. An unspecified vulnerability in Oracle Java SE and Java SE 
    Embedded related to the Hotspot component has high confidentiality impact, 
    high integrity impact, and high availability impact. (CVE-2016-5582)  
2. An unspecified vulnerability in Oracle Java SE related to the
    AWT component has high confidentiality impact, high integrity impact, and
    high availability impact. (CVE-2016-5568)  
3.An unspecified vulnerability in Oracle Java SE related to the
    2D component has high confidentiality impact, high integrity impact, and high
    availability impact. (CVE-2016-5556)  
4.  An unspecified vulnerability in Oracle Java SE and Java SE 
    Embedded related to the Hotspot component has high confidentiality impact, 
    high integrity impact, and high availability impact. (CVE-2016-5573)  
5. An unspecified vulnerability in Oracle Java SE and Java SE
    Embedded related to the Networking component could allow a remote attacker 
    to obtain sensitive information resulting in a high confidentiality impact 
    using unknown attack vectors. (CVE-2016-5597)  
6. An unspecified vulnerability in Oracle Java SE and Java SE 
    Embedded related to the JMX component has no confidentiality impact, low 
    integrity impact, and no availability impact. (CVE-2016-5554)  
7. An unspecified vulnerability in Oracle Java SE and Java SE
    Embedded related to the Libraries component has no confidentiality impact, 
    low integrity impact, and no availability impact.  (CVE-2016-5542)  
Affected Versions:-  
AIX 5.3, 6.1, 7.1, 7.2","Successful exploitation allows remote attackers to affect confidentiality, integrity, and availability impact."
"CVE-2017-10345,CVE-2017-10295,CVE-2017-10281,CVE-2017-10350,CVE-2017-10347,CVE-2017-10349,CVE-2017-10348,CVE-2017-10357,CVE-2017-10355,CVE-2017-10356,CVE-2017-10309,CVE-2017-10388,CVE-2017-10285,CVE-2017-10346,CVE-2016-10165,CVE-2017-10165",App3,$900000,3,9.6,0.85,1,0.8,6.5280000000000005,19.584000000000003,IBM,AIX 6.1,IBM AIX Java Multiple Vulnerabilities (java_oct2017_advisory),"The vendor has released fixes to resolve this vulnerability. Refer to AIX java_oct2017_advisory (http://aix.software.ibm.com/aix/efixes/security/java_oct2017_advisory.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  java_oct2017_advisory (https://www-945.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~WebSphere&product=ibm/IBM+SDKs+for+Java+Technology/Java+Standard+Edition+%28Java+SE%29&release=6.0.0.0&platform=AIX+32-bit,+pSeries&function=all)","There are multiple vulnerabilities in IBM SDK Java Technology Edition,
 Versions 6, 7, 7.1, 8 that are used by AIX. These issues were disclosed
 as part of the IBM Java SDK updates in October 2017.
Affected Versions:  
AIX 5.3, 6.1, 7.1, 7.2

Note:The detection requires root privileges to run ""emgr -c"" or ""instfix -k"" to check for patches. In absence of such privileges, the detection may not output actual results.","Successful exploitation allows remote attackers to affect confidentiality, integrity, and availability impact."
CVE-2021-3156,App3,$900000,3,7.8,1,1,0.8,6.24,18.72,Others,AIX 6.1,Sudo Heap-based Buffer Overflow Vulnerability (Baron Samedit) (Generic),"Upgrade to 1.9.5p2 or apply the patch from your distribution vendor.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  Sudo Downloads (https://www.sudo.ws/download.html)","sudo is a program for Unix-like computer operating systems that allows users to run programs with the security privileges of another user, by default the superuser. 
We discovered a heap-based buffer overflow in Sudo (CVE-2021-3156) and developed three different exploits for this vulnerability, and obtained full root privileges on Ubuntu. It has been given the name Baron Samedit. The bug can be leveraged to elevate privileges to root, even if the user is not listed in the sudoers file.
 Affected Versions: 
all legacy versions from 1.8.2 to 1.8.31p2
all stable versions from 1.9.0 to 1.9.5p1

QID Detection: (Authenticated) - Linux 
This QID executes the commands ""sudo -V 2>1 | grep -i version"" ,""sudoedit -s /"" and ""sudo -V 2>1 | grep -i version"". If any of these commands is executed, then the QID checks for Sudo version from the command outputs.",A low privilege local attacker may exploit this vulnerability to obtained full root privileges.
CVE-2018-1655,App10,$75000,5,5.5,0.85,1,0.8,3.74,18.700000000000003,IBM,AIX 6.1,IBM AIX rmsock Information Disclosure Vulnerability (rmsock_advisory2),"The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory (http://aix.software.ibm.com/aix/efixes/security/rmsock_advisory2.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  rmsock_advisory2 (http://aix.software.ibm.com/aix/efixes/security/rmsock_advisory2.asc.sig)","IBM AIX contains a vulnerability in the rmsock command that may be used to expose kernel memory..   Affected Platforms: AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2 Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results. 
APAR versions: IJ06905, IJ06906, IJ06904, IJ06934, IJ06907, IJ06908  
 
QID Detection Logic (Authenticated): 
The detection checks for installed packages version via command : - ""lslpp -L"".  
It also checks for interim fixes installed using the command ""emgr -c"" or ""instfix -k"". 
The detection posts vulnerable if installed package version is less than patched version and interim fixes are also not installed.",A local user can exploit an unspecified flaw in the 'rmsock' command to obtain potentially sensitive information from kernel memory on the target system.
CVE-2018-3639,App10,$75000,5,5.5,0.85,1,0.8,3.74,18.700000000000003,IBM,AIX 6.1,IBM AIX Speculative Store Bypass (SSB) or Variant 4 Vulnerability (variant4_advisory),"The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory (http://aix.software.ibm.com/aix/efixes/security/variant4_advisory.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  variant4_advisory (https://aix.software.ibm.com/aix/efixes/security/variant4_advisory.asc.sig)","IBM has released AIX Fixes in response to Speculative Store Bypass (SSB), also known as Variant 4.   Affected Platforms: AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2 Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results. 
APAR versions: IJ05826, IJ05824, IJ05823, IJ05822, IJ05821, IJ05820, IJ05818   
 
QID Detection Logic (Authenticated): 
The detection checks for installed packages version via command : - ""lslpp -L"".  
It also checks for interim fixes installed using the command ""emgr -c"" or ""instfix -k"". 
The detection posts vulnerable if installed package version is less than patched version and interim fixes are also not installed.",An attacker may exploit this issue to perform unauthorized actions in the context of the application.
"CVE-2018-3139,CVE-2018-3136,CVE-2018-13785,CVE-2018-3214,CVE-2018-3180,CVE-2018-3149,CVE-2018-3169,CVE-2018-3183",App10,$45000,3,9,0.85,1,0.8,6.12,18.36,IBM,AIX 6.1,IBM AIX Java Multiple Vulnerabilities(java_oct2018_advisory),"The vendor has released fixes to resolve this vulnerability. Refer to AIX java_oct2018_advisory (http://aix.software.ibm.com/aix/efixes/security/java_oct2018_advisory.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  java_oct2018_advisory (http://aix.software.ibm.com/aix/efixes/security/java_oct2018_advisory.asc)","There are multiple vulnerabilities in IBM SDK Java Technology Edition,Versions 7, 7.1, 8 that are used by AIX. These issues were disclosed as part of the IBM Java SDK updates in October 2018.

Affected Versions: 
AIX 6.1
AIX 7.1
AIX 7.2

Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.

QID Detection Logic (Authenticated): 
The detection checks for installed packages version via command : - ""lslpp -L"". 
It also checks for interim fixes installed using the command ""emgr -c"" or ""instfix -k"".
The detection posts vulnerable if installed package version is less than patched version and interim fixes are also not installed.","Successful exploitation allows remote attackers to affect confidentiality, integrity, and availability impact."
CVE-2017-15906,App10,$75000,5,5.3,0.85,1,0.8,3.604,18.02,IBM,AIX 6.1,IBM AIX OpenSSH Vulnerability (openssh_advisory11),"The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory openssh_advisory11 (http://aix.software.ibm.com/aix/efixes/security/openssh_advisory11.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  AIX Advisory openssh_advisory11: AIX 5.3, 6.1, 7.1 and 7.2 (OpenSSH) (https://www-01.ibm.com/marketing/iwm/iwm/web/reg/download.do?source=aixbp&lang=en_US&S_PKG=openssh&cp=UTF-8)","IBM AIX is prone to the following vulnerability:
 
The process_open function in sftp-server.c in OpenSSH does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files.(CVE-2017-15906)
 
Affected Platforms: 
AIX 5.3, 6.1, 7.1 and 7.2

QID Detection Logic(Authenticated)  
It checks for vulnerable versions of OpenSSH in IBM AIX.",Successful exploitation allows attackers to create zero-length files.
CVE-2017-3735,App2,$2500000,5,5.3,0.85,1,0.8,3.604,18.02,IBM,AIX 6.1,IBM AIX OpenSSL Security Bypass Vulnerability (openssl_advisory24),"The vendor has released fixes to resolve this vulnerability. Refer to AIX openssl_advisory24 (http://aix.software.ibm.com/aix/efixes/security/openssl_advisory24.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  openssl_advisory24 (https://www14.software.ibm.com/webapp/iwm/web/reg/download.do?source=aixbp&lang=en_US&S_PKG=openssl&cp=UTF-8)","OpenSSL is prone to a security-bypass vulnerability. 
 If an X.509 certificate has a malformed IPAddressFamily extension, OpenSSL could do a one-byte buffer overread. The most likely result could be an erroneous display of the certificate in text format.

Affected Versions:  
AIX 5.3,6.1, 7.1, 7.2 
 
Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.
 
QID Detection Logic (Authenticated): 
The detection checks for installed packages version via command : - ""lslpp -L"".  
It also checks for interim fixes installed using the command ""emgr -c"". 
The detection posts vulnerable if installed package version is less than patched version and interim fixes are also not installed.",Successfully exploiting this issue will allow attackers to bypass security restrictions and perform unauthorized actions; this may aid in launching further attacks.
CVE-2018-15473,App10,$75000,5,5.3,0.85,1,0.8,3.604,18.02,IBM,AIX 6.1,IBM AIX OpenSSH Vulnerability (openssh_advisory12),"The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory openssh_advisory11 (http://aix.software.ibm.com/aix/efixes/security/openssh_advisory12.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  openssh_advisory12 (http://aix.software.ibm.com/aix/efixes/security/openssh_advisory12.asc)","Vulnerability in OpenSSH affects AIX.
OpenSSH is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed. 
OpenSSH could allow a remote attacker to obtain sensitive information, caused by different responses to valid and invalid authentication attempts. By sending a specially crafted request, an attacker could exploit this vulnerability to enumerate valid usernames.

Affected Platforms: 
AIX 5.3, 6.1, 7.1 and 7.2

QID Detection Logic(Authenticated)  
It checks for vulnerable versions of OpenSSH in IBM AIX.","By sending a specially crafted request, an attacker could exploit this vulnerability to enumerate valid usernames."
CVE-2018-6922,App10,$75000,5,5.3,0.85,1,0.8,3.604,18.02,IBM,AIX 6.1,IBM AIX FreeBSD Denial of Service Vulnerability(freebsd_advisory),"The vendor has released fixes to resolve this vulnerability. Refer to AIX freebsd_advisory (http://aix.software.ibm.com/aix/efixes/security/freebsd_advisory.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  freebsd_advisory (http://aix.software.ibm.com/aix/efixes/security/freebsd_advisory.asc)"," FreeBSD is vulnerable to a denial of service, caused by the use of an inefficient TCP reassembly algorithm. By sending specially-crafted TCP traffic, a remote attacker could exploit this vulnerability to consume all available CPU resources.

Affected Versions: 
AIX 5.3, 6.1, 7.1, 7.2

Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.

QID Detection Logic (Authenticated): 
The detection checks for installed packages version via command : - ""lslpp -L"". 
It also checks for interim fixes installed using the command ""emgr -c"" or ""instfix -k"".
The detection posts vulnerable if installed package version is less than patched version and interim fixes are also not installed.",A remote attacker could exploit this vulnerability to consume all available CPU resources.
"CVE-2022-21393,CVE-2022-21349,CVE-2022-21291,CVE-2022-21305,CVE-2022-21360,CVE-2022-21365,CVE-2022-21282,CVE-2022-21296,CVE-2022-21299,CVE-2022-21271,CVE-2022-21293,CVE-2022-21294,CVE-2022-21340,CVE-2022-21341,CVE-2022-21248",App10,$75000,5,5.3,0.85,1,0.8,3.604,18.02,Oracle,AIX 6.1,Oracle Database 12.1.0.2 Critical Patch Update - January 2022 (Unauthenticated),"Customers are requested to refer to CPUJan2022 (https://support.oracle.com/rs?type=doc&id=2796575.1) to obtain details about how to deploy the update. 
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  CPUJAN2022 (https://support.oracle.com/rs?type=doc&id=2817011.1)","Oracle Database quarterly patches are proactive cumulative patches containing recommended bug fixes that are released on a regular schedule. 
Affected Software: 
Oracle Database 12.1.0.2 
QID Detection Logic (Unauthenticated): 
This QID connects the remote server's Oracle listener and reviews the Oracle banner version.",Successful exploitation could allow an attacker to compromise the database.
"CVE-2022-21393,CVE-2022-21349,CVE-2022-21291,CVE-2022-21305,CVE-2022-21360,CVE-2022-21365,CVE-2022-21282,CVE-2022-21296,CVE-2022-21299,CVE-2022-21271,CVE-2022-21293,CVE-2022-21294,CVE-2022-21340,CVE-2022-21341,CVE-2022-21248",App2,$2500000,5,5.3,0.85,1,0.8,3.604,18.02,Oracle,AIX 6.1,Oracle Database 12.1.0.2 Critical Patch Update - January 2022 (Unauthenticated),"Customers are requested to refer to CPUJan2022 (https://support.oracle.com/rs?type=doc&id=2796575.1) to obtain details about how to deploy the update. 
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  CPUJAN2022 (https://support.oracle.com/rs?type=doc&id=2817011.1)","Oracle Database quarterly patches are proactive cumulative patches containing recommended bug fixes that are released on a regular schedule. 
Affected Software: 
Oracle Database 12.1.0.2 
QID Detection Logic (Unauthenticated): 
This QID connects the remote server's Oracle listener and reviews the Oracle banner version.",Successful exploitation could allow an attacker to compromise the database.
"CVE-2017-6451,CVE-2017-6458,CVE-2017-6462,CVE-2017-6464",App2,$1500000,3,8.8,0.85,1,0.8,5.984000000000001,17.952,IBM,AIX 6.1,IBM AIX NTP Multiple Vulnerabilities (ntp_advisory9.asc),"The vendor has released fixes to resolve this vulnerability. Refer to AIX NTP Advisory (http://aix.software.ibm.com/aix/efixes/security/ntp_advisory9.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  ntp_advisory9: AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2 (https://aix.software.ibm.com/aix/efixes/security/ntp_fix9.tar)","There are multiple vulnerabilities in NTPv3 and NTPv4 that impact AIX.   
Affected Platforms: 
AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2

APAR versions: 
IV96305, IV96306, IV96307, IV96308, IV96309, IV96310, IV96311, IV96312

Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.","By sending an overly long string argument, a remote authenticated attacker could exploit this vulnerability to overflow a buffer and cause the application to crash."
"CVE-2016-1286,CVE-2016-1285",App2,$1500000,3,8.6,0.85,1,0.8,5.848,17.544,IBM,AIX 6.1,IBM AIX BIND Denial of Service Vulnerability,"The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory (http://aix.software.ibm.com/aix/efixes/security/bind_advisory12.asc) to obtain more information
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  IBM AIX BIND Denial of Service Vulnerability: AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2 (ftp://aix.software.ibm.com/aix/efixes/security/bind_fix12.tar)","AIX is prone to the following vulnerabilities:

ISC BIND is vulnerable to a denial of service, caused by the improper handling of control channel input. By sending a specially crafted packet, a remote attacker could exploit this vulnerability to trigger an assertion failure in sexpr.c or alist.c and cause the named process to crash. 
 ISC BIND is vulnerable to a denial of service, caused by an error when parsing signature records for DNAME resource records. A remote attacker could exploit this vulnerability to trigger an assertion failure in resolver.c or db.c and cause the named process to crash.
 Affected Platforms: AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2
 Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.  APAR versions: IV85298m9a,IV84456s5b,IV84984m5a,IV84456s6a,IV84984m6a,IV84456s7a,IV84984s7a,IV84457s6a,IV85296m6a,IV84458s1a,IV84947m1a,IV84458s2a,IV85296s2a,IV84457s5a,IV85296m5a,IV84459s1a,IV85297m1a,IV84459s2a,IV85297s2a",Exploitation could result in a denial of service condition.
"CVE-2018-1517,CVE-2018-1656,CVE-2018-2973,CVE-2018-2952,CVE-2018-2940,CVE-2018-2964,CVE-2018-12539",App10,$45000,3,8.3,0.85,1,0.8,5.644000000000001,16.932000000000002,IBM,AIX 6.1,IBM AIX Java Multiple Vulnerabilities(java_july2018_advisory),"The vendor has released fixes to resolve this vulnerability. Refer to AIX java_july2018_advisory (http://aix.software.ibm.com/aix/efixes/security/java_july2018_advisory.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  java_july2018_advisory (http://aix.software.ibm.com/aix/efixes/security/java_july2018_advisory.asc)","There are multiple vulnerabilities in IBM SDK Java Technology Edition,Versions 7, 7.1, 8 that are used by AIX. These issues were disclosed as part of the IBM Java SDK updates in July 2018.

Affected Versions: 
AIX 5.3, 6.1, 7.1, 7.2

QID Detection Logic (Authenticated): 
The detection checks for installed packages version via command: - ""lslpp -L"".","Successful exploitation allows remote attackers to affect confidentiality, integrity, and availability impact."
"CVE-2018-2579,CVE-2018-2582,CVE-2018-2588,CVE-2018-2599,CVE-2018-2602,CVE-2018-2603,CVE-2018-2618,CVE-2018-2629,CVE-2018-2633,CVE-2018-2634,CVE-2018-2637,CVE-2018-2638,CVE-2018-2639,CVE-2018-2641,CVE-2018-2657,CVE-2018-2663,CVE-2018-2677,CVE-2018-2678",App3,$900000,3,8.3,0.85,1,0.8,5.644000000000001,16.932000000000002,IBM,AIX 6.1,"IBM Java SDK Multiple Vulnerabilities (Oracle January 16 2018 CPU (1.6.0_181, 1.7.0_171, 1.8.0_161))","Latest service refresh packs are available at Java for AIX Download page (http://www.ibm.com/developerworks/java/jdk/aix/service.html). Refer to Oracle January 16 2018 CPU  (https://developer.ibm.com/javasdk/support/security-vulnerabilities/#Oracle_January_16_2018_CPU) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  Oracle January 16 2018 CPU (1.6.0_181, 1.7.0_171, 1.8.0_161): IBM Java SDK and JRE (https://developer.ibm.com/javasdk/support/security-vulnerabilities/#Oracle_January_16_2018_CPU)","IBM Java SDK and JRE are prone to multiple vulnerabilities that can be exploited by malicious people to disclose certain sensitive information, manipulate certain data, bypass certain security restrictions, cause a denial of service and compromise a vulnerable system. Affected Versions: IBM Java SDK and JRE prior to 6.0.16.60 IBM Java SDK and JRE prior to 6.1.8.60 IBM Java SDK and JRE prior to 7.0.10.20 IBM Java SDK and JRE prior to 7.1.4.20 IBM Java SDK and JRE prior to 8.0.5.10 
 QID Detection Logic (Authenticated): 
The QID checks runs ""java -version"" command to check if vulnerable IBM Java is installed on the system",Successful exploitation allows attacker to compromise the system.
"CVE-2018-2579,CVE-2018-2588,CVE-2018-2663,CVE-2018-2677,CVE-2018-2678,CVE-2018-2602,CVE-2018-2599,CVE-2018-2603,CVE-2018-2657,CVE-2018-2618,CVE-2018-2641,CVE-2018-2582,CVE-2018-2634,CVE-2018-2637,CVE-2018-2633,CVE-2018-2638,CVE-2018-2639,CVE-2018-1417",App10,$45000,3,8.3,0.85,1,0.8,5.644000000000001,16.932000000000002,IBM,AIX 6.1,IBM AIX Java Multiple Vulnerabilities(java_jan2018_advisory),"The vendor has released fixes to resolve this vulnerability. Refer to AIX java_jan2018_advisory (http://aix.software.ibm.com/aix/efixes/security/java_jan2018_advisory.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  java_jan2018_advisory (http://aix.software.ibm.com/aix/efixes/security/java_jan2018_advisory.asc)","There are multiple vulnerabilities in IBM SDK Java Technology Edition,Versions 7, 7.1, 8 that are used by AIX. These issues were disclosed as part of the IBM Java SDK updates in January 2018.

Affected Versions: 
AIX 5.3, 6.1, 7.1, 7.2

QID Detection Logic (Authenticated): 
The detection checks for installed packages version via command: - ""lslpp -L"".","Successful exploitation allows remote attackers to affect confidentiality, integrity, and availability impact."
"CVE-2018-2814,CVE-2018-2794,CVE-2018-2783,CVE-2018-2799,CVE-2018-2798,CVE-2018-2797,CVE-2018-2796,CVE-2018-2795,CVE-2018-2800,CVE-2018-2790",App3,$900000,3,8.3,0.85,1,0.8,5.644000000000001,16.932000000000002,IBM,AIX 6.1,"IBM Java SDK Multiple Vulnerabilities (Oracle April 17 2018 CPU (1.6.0_191, 1.7.0_181, 1.8.0_171))","Latest service refresh packs are available at  IBM SDK, Java Technology Edition Download (https://developer.ibm.com/javasdk/downloads/).  
Refer to Oracle April 17 2018 CPU  (https://developer.ibm.com/javasdk/support/security-vulnerabilities/#Oracle_April_17_2018_CPU) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  Oracle April 17 2018 CPU (1.6.0_191, 1.7.0_181, 1.8.0_171): IBM Java SDK and JRE (https://developer.ibm.com/javasdk/support/security-vulnerabilities/#Oracle_April_17_2018_CPU)"," IBM Java SDK and JRE are prone to multiple vulnerabilities that can be exploited by malicious people to disclose certain sensitive information, manipulate certain data, bypass certain security restrictions, cause a denial of service and compromise a vulnerable system.
 Affected Versions: 
IBM Java SDK and JRE prior to 6.0.16.65 
IBM Java SDK and JRE prior to 6.1.8.65 
IBM Java SDK and JRE prior to 7.0.10.25 
IBM Java SDK and JRE prior to 7.1.4.25 
IBM Java SDK and JRE prior to 8.0.5.15 
 QID Detection Logic (Authenticated): 
The QID  runs ""java -version"" command to check if vulnerable IBM Java is installed on the system.",Successful exploitation allows attacker to compromise the system.
"CVE-2020-14621,CVE-2020-14593,CVE-2020-14583,CVE-2020-14579,CVE-2020-14578,CVE-2020-14577,CVE-2020-14556,CVE-2020-17639,CVE-2020-2601,CVE-2020-2590,CVE-2020-14581,CVE-2019-17639",App10,$45000,3,8.3,0.85,1,0.8,5.644000000000001,16.932000000000002,IBM,AIX 6.1,"IBM Java SDK Multiple Vulnerabilities(Oracle July 14 2020 CPU (1.7.0_271, 1.8.0_261))","Latest service refresh packs are available at  IBM SDK, Java Technology Edition Download (https://developer.ibm.com/javasdk/downloads/).  
Refer to Oracle July 14 2020 CPU  (https://www.ibm.com/support/pages/node/6256562) 
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  IBM Java SDK(Oracle July 14 2020 CPU (1.7.0_271, 1.8.0_261)) (https://developer.ibm.com/javasdk/support/security-vulnerabilities/#Oracle_April_18_2017_CPU)","IBM Java SDK are prone to multiple vulnerabilities. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data.

Affected Versions: 
Prior to 7.0.10.70 
Prior to 7.1.4.70 
Prior to  8.0.6.15

QID Detection Logic (Authenticated): 
The QID  runs java -version; command to check if vulnerable IBM Java is installed on the system.","Successful exploitation could allow attacker to gain unauthorized update, insert or delete access."
"CVE-2015-6563,CVE-2016-0777,CVE-2016-0778,CVE-2015-6564",App2,$1500000,3,8.1,0.85,1,0.8,5.508,16.524,IBM,AIX 6.1,IBM AIX OpenSSH Multiple Vulnerabilities,"The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory (http://aix.software.ibm.com/aix/efixes/security/openssh_advisory7.asc) to obtain more information
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  IBM AIX OpenSSH Multiple Vulnerabilities: AIX 5.3, 6.1, 7.1, 7.2 (https://www14.software.ibm.com/webapp/iwm/web/preLogin.do?source=aixbp)","AIX is prone to the following vulnerabilities: OpenSSH could allow a remote attacker to obtain sensitive 
        information, caused by a client information leak from using the roaming
        connection feature. By persuading a victim to connect to a malicious 
        server, an attacker could exploit this vulnerability to retrieve 
        private cryptographic keys or other sensitive information.
 
OpenSSH is vulnerable to a heap-based buffer overflow, caused 
        by improper bounds checking by the packet_write_wait() and 
        ssh_packet_write_wait() API functions when two non-default options: a 
        ProxyCommand and either ForwardAgent or ForwardX11are used. By 
        persuading a victim to connect to a malicious server, a remote attacker
        could overflow a buffer and execute arbitrary code on the system or 
        cause the application to crash.
 Affected Platforms: AIX 5.3, 6.1, 7.1 and 7.2 are affected
 Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.  APAR versions: IV80743",Exploitation could allow an attacker to execute arbitrary code or cause a denial of service.
CVE-2012-1675,App2,$6000000,12,2,0.85,1,0.8,1.36,16.319999999999997,Oracle,AIX 6.1,Oracle Database TNS Listener Poison Attack Vulnerability,"Oracle has released a patch to resolve this issue. Refer to Oracle CVE-2012-1675 Alert (https://www.oracle.com/technetwork/topics/security/alert-cve-2012-1675-1608180.html) to obtain more information.

Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  Oracle Security Alert for CVE-2012-1675 (https://www.oracle.com/technetwork/topics/security/alert-cve-2012-1675-1608180.html)

Virtual Patches:
Trend Micro Virtual Patching(http://www.trendmicro.com/vulnerabilitycontrols)
Virtual Patch #1004997: 1004997 - Detected Too Many Oracle TNS Service Register Requests","A vulnerability exists in the Listener component of Oracle Database Server. Easily exploitable vulnerability allows successful unauthenticated network attacks via Oracle Net. Successful attack of this vulnerability can result in unauthorized update, insert or delete access to all Listener accessible data as well as read access to all Listener accessible data and ability to cause a partial denial of service (partial DOS) of Listener.
 
This vulnerability allows an attacker to perform a man-in-the-middle attack by registering an additional database instance in the TNS listener. The listener will then start load-balancing traffic to the new instance. This allows the attacker to receive the database transactions, record them and forward them to the original database.  The attacker could also potentially modify the transactions and execute commands on the original database server. 
 
This QID sends a request to register with the listener with the following command:
 
(CONNECT_DATA=(COMMAND=service_register_NSGR))
 
If the listener acknowledges and allows the scanner to register, then the QID is posted. If Oracle suggested solution is applied then the listener should not allow the scanner to register successfully.
 
Affected Products and Versions: 
Oracle Database 11g Release 2, versions 11.2.0.2, 11.2.0.3, 11.2.0.4 
Oracle Database 11g Release 1, version 11.1.0.7 
Oracle Database 10g Release 2, versions 10.2.0.3, 10.2.0.4, 10.2.0.5 
NOTE: Although Oracle Database prior to 10g versions are not listed in the Oracle advisory, older versions of Oracle not covered by their lifetime policy and as per advisory, they could be affected.","This vulnerability allows an attacker to receive the database transactions, record them and forward them to the original database. The attacker can potentially modify the transactions and execute commands on the original database server. 
 
This vulnerability may be remotely exploitable without authentication, i.e. it may be exploited over a network without the need for a username and password."
"CVE-2015-8325,CVE-2016-6210,CVE-2016-6515",App2,$1500000,3,7.8,0.85,1,0.8,5.304,15.912,IBM,AIX 6.1,IBM AIX OpenSSH Multiple Vulnerabilities (openssh_advisory9),"The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory openssh_advisory9 (http://aix.software.ibm.com/aix/efixes/security/openssh_advisory9.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  openssh_advisory9: AIX 5.3, 6.1, 7.1, 7.2 (http://aix.software.ibm.com/aix/efixes/security/openssh_fix9.tar)","IBM AIX is prone to the following vulnerabilities:
 
When the UseLogin feature is enabled and PAM is configured to 
        read .pam_environment files in user home directories, allows local users 
        to gain privileges by triggering a crafted environment for the /bin/login 
        program, as demonstrated by an LD_PRELOAD environment variable.
 
An attacker can measure timing differences in password 
    authentication that could be used to discern valid from invalid account 
    names when long passwords were sent and particular password hashing
       algorithms are in use on the server 
 
sshd does not limit password lengths for password authentication, 
        which allows remote attackers to cause a denial of service 
        (crypt CPU consumption) via a long string.  
 
Affected Platforms: 
AIX 5.3, 6.1, 7.1 and 7.2
 
Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.",Exploitation could allow a remote attacker to execute arbitrary code.
CVE-2016-6079,App2,$1500000,3,7.8,0.85,1,0.8,5.304,15.912,IBM,AIX 6.1,IBM AIX lquerylv Privilege Escalation Vulnerability (lquerylv_advisory.asc),"The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory lquerylv_advisory.asc (http://aix.software.ibm.com/aix/efixes/security/lquerylv_advisory.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  lquerylv_advisory.asc: AIX 5.3, 6.1, 7.1 and 7.2 (http://aix.software.ibm.com/aix/efixes/security/lquerylv_fix.tar)","AIX contains an unspecified vulnerability in lquerylv in LVM that impacts AIX.   
Affected Versions:-  
AIX 5.3, 6.1, 7.1, 7.2  
 
Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results. 
 
APAR versions: 
IV88658s9a, IV88658, IV87981s7a,IV87981s7a,IV87981s7a, IV87981, IV88419s7a,IV88419s7a,IV88419s7a,IV87640s2a,IV87640s2a,IV87640s2a, IV88419,IV87640, IV88053s2a,IV88053s2a,IV88053s2a,IV88053",The vulnerability could allow a locally authenticated user to obtain root level privileges.
"CVE-2016-8858,CVE-2016-10009,CVE-2016-10011,CVE-2016-10012",App2,$1500000,3,7.8,0.85,1,0.8,5.304,15.912,IBM,AIX 6.1,IBM AIX OpenSSH Multiple Vulnerabilities (openssh_advisory10),"The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory openssh_advisory10 (http://aix.software.ibm.com/aix/efixes/security/openssh_advisory10.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  AIX Advisory openssh_advisory10: AIX 5.3, 6.1, 7.1 and 7.2 (OpenSSH) (https://www14.software.ibm.com/webapp/iwm/web/reg/download.do?source=aixbp&lang=en_US&S_PKG=openssh&cp=UTF-8)","IBM AIX is prone to the following vulnerabilities:
 
OpenSSH is vulnerable to a denial of service, caused by an
    error in the kex_input_kexinit() function. By sending specially crafted data
    during the key exchange process, a remote attacker could exploit this
    vulnerability to consume all available memory resources. (CVE-2016-8858)
 
OpenSSH could allow a remote authenticated attacker to execute
     arbitrary code on the system, caused by the loading of a specially crafted
     PKCS#11 module across a forwarded agent channel. An attacker could exploit 
     this vulnerability to write files or execute arbitrary code on the system. (CVE-2016-10009)
 
OpenSSH could allow a local authenticated attacker to obtain
    sensitive information, caused by a privilege separation flaw. An attacker 
    could exploit this vulnerability to obtain host private key material and 
    other sensitive information. (CVE-2016-10011)
 
OpenSSH could allow a local attacker to gain elevated privileges
    on the system, caused by improper bounds checking in the shared memory
    manager. An attacker could exploit this vulnerability to gain elevated 
    privileges on the system. (CVE-2016-10012)
 
Affected Platforms: 
AIX 5.3, 6.1, 7.1 and 7.2
 
Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results. 
APAR versions:
6203_ifix.",Successful exploitation could result in Denial of Service Vulnerability.
CVE-2016-8972,App2,$1500000,3,7.8,0.85,1,0.8,5.304,15.912,IBM,AIX 6.1,IBM AIX bellmail Privilege Escalation Vulnerability (bellmail_advisory),"The vendor has released fixes to resolve this vulnerability. Refer to AIX bellmail_advisory (https://aix.software.ibm.com/aix/efixes/security/bellmail_advisory.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  AIX bellmail_advisory: AIX 6.1, 7.1, 7.2 (http://aix.software.ibm.com/aix/efixes/security/bellmail_fix.tar)","IBM AIX is prone to a privilege escalation vulnerability.  
IBM AIX could allow a local user to gain root privileges using a specially crafted command within the bellmail client.
  Affected Versions:-  
AIX 6.1, 7.1, 7.2 
 
Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.
 
APAR versions: 
IV91006s8a, IV91006, IV91007s7a, IV91008s3a, IV91007, IV91008, IV91010s2a, IV91011s1a, IV91010, IV91011",IBM AIX could allow a local user to gain root privileges using a specially crafted command within the bellmail client.
CVE-2017-1093,App2,$1500000,3,7.8,0.85,1,0.8,5.304,15.912,IBM,AIX 6.1,IBM AIX bellmail Privilege Escalation Vulnerability (bellmail_advisory2),"The vendor has released fixes to resolve this vulnerability. Refer to AIX bellmail_advisory2 (http://aix.software.ibm.com/aix/efixes/security/bellmail_advisory2.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  AIX bellmail_advisory2: AIX 6.1, 7.1, 7.2 (https://aix.software.ibm.com/aix/efixes/security/bellmail_advisory2.asc.sig)","IBM AIX is prone to a privilege escalation vulnerability.  
IBM AIX could allow a local user to gain root privileges using a specially crafted command within the bellmail client.
  Affected Versions:-  
AIX 6.1, 7.1, 7.2 
 
Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.
 
APAR versions: 
IV92238m8a,IV92238m8a,IV92238m8a,IV92250m71,IV92250m71,IV92250m71,IV92240m3a,IV92240m3a,IV92240m3a,IV92241m2a,IV92241m2a,IV92241m2a,IV92242m1a,IV92242m1a,IV92241,IV92242, IV92250,IV92240,IV92238",IBM AIX could allow a local user to exploit a vulnerability in the bellmail binary to gain root privileges.
CVE-2017-1692,App2,$1500000,3,7.8,0.85,1,0.8,5.304,15.912,IBM,AIX 6.1,"IBM AIX ""suid"" Privilege Escalation Vulnerability (suid_advisory)","The vendor has released fixes to resolve this vulnerability. Refer to AIX suid_advisory (http://aix.software.ibm.com/aix/efixes/security/suid_advisory.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  suid_advisory (https://aix.software.ibm.com/aix/efixes/security/suid_advisory.asc)","IBM AIX contains an unspecified vulnerability that would allow a locally authenticated user to obtain root level privileges. (CVE-2017-1692)  
A local user can exploit an unspecified flaw in bellmail, caccelstat, iostat, lquerypv, restbyinode, and vmstat to obtain root level privileges on the target system.
  Affected Versions:  
AIX 5.3,6.1, 7.1, 7.2 
 
Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.

QID Detection Logic (Authenticated): 
The detection checks for installed packages version via command : - ""lslpp -L"".  
It also checks for interim fixes installed using the command ""emgr -c"". 
The detection posts vulnerable if installed package version is less than patched version and interim fixes are also not installed.",A local user can obtain root privileges on the target system.
"CVE-2015-7974,CVE-2016-1550,CVE-2016-1551,CVE-2016-2517,CVE-2016-2518,CVE-2016-2519,CVE-2016-1547,CVE-2016-4957,CVE-2016-4953,CVE-2016-4954,CVE-2016-4955",App2,$1500000,3,7.7,0.85,1,0.8,5.236000000000001,15.708000000000002,IBM,AIX 6.1,IBM AIX NTP Multiple Vulnerabilities (ntp_advisory7.asc),"The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory (http://aix.software.ibm.com/aix/efixes/security/ntp_advisory7.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  ntp_advisory7.asc: AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2 (ftp://aix.software.ibm.com/aix/efixes/security/ntp_fix7.tar)","There are multiple vulnerabilities in NTPv3 and NTPv4 that impact AIX.   
Affected Platforms: 
AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2

APAR versions: 
IV87614, IV87419, IV87615, IV87420, IV87939, IV87278, IV87279

Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.","The most severe of the vulnerabilities could allow denial of service. By sending spoofed CRYPTO_NAK or a bad MAC packets with correct origin timestamps, a remote attacker could exploit this vulnerability to cause the autokey association to reset."
"CVE-2018-2800,CVE-2018-2795,CVE-2018-2796,CVE-2018-2797,CVE-2018-2798,CVE-2018-2799,CVE-2018-2783,CVE-2018-2794,CVE-2018-2790",App10,$45000,3,7.7,0.85,1,0.8,5.236000000000001,15.708000000000002,IBM,AIX 6.1,IBM AIX Java Multiple Vulnerabilities(java_apr2018_advisory),"The vendor has released fixes to resolve this vulnerability. Refer to AIX java_apr2018_advisory (http://aix.software.ibm.com/aix/efixes/security/java_apr2018_advisory.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  java_apr2018_advisory (http://aix.software.ibm.com/aix/efixes/security/java_apr2018_advisory.asc)","There are multiple vulnerabilities in IBM SDK Java Technology Edition,Versions 7, 7.1, 8 that are used by AIX. These issues were disclosed as part of the IBM Java SDK updates in April 2018.

Affected Versions: 
AIX 5.3, 6.1, 7.1, 7.2

QID Detection Logic (Authenticated): 
The detection checks for installed packages version via command: - ""lslpp -L"".","Successful exploitation allows remote attackers to affect confidentiality, integrity, and availability impact."
CVE-2014-3956,App3,$900000,3,7.5,0.85,1,0.8,5.1000000000000005,15.3,IBM,AIX 6.1,IBM AIX Sendmail File Descriptor Security Vulnerability (sendmail_advisory3),"The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory (http://aix.software.ibm.com/aix/efixes/security/sendmail_advisory3.asc) to obtain more information
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  sendmail_advisory3: AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2 (https://aix.software.ibm.com/aix/efixes/security/sendmail_fix3.tar)","AIX is prone to the following vulnerabilities:   The sm_close_on_exec function in conf.c in sendmail before 
        8.14.9 has arguments in the wrong order, and consequently skips 
        setting expected FD_CLOEXEC flags, which allows local users to access 
        unintended high-numbered file descriptors via a custom mail-delivery 
        program.    Affected Platforms: AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2 Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results. 
APAR versions: IJ03273, IJ02915, IJ02917, IJ03121, IJ02918, IJ02919, IJ02920   
 
QID Detection Logic (Authenticated): 
The detection checks for installed packages version via command : - ""lslpp -L"".  
It also checks for interim fixes installed using the command ""emgr -c"" or ""instfix -k"". 
The detection posts vulnerable if installed package version is less than patched version and interim fixes are also not installed.",An attacker may exploit this issue to perform unauthorized actions in the context of the application.
"CVE-2015-3194,CVE-2015-3195,CVE-2015-3196",App2,$1500000,3,7.5,0.85,1,0.8,5.1000000000000005,15.3,IBM,AIX 6.1,IBM AIX OpenSSL Multiple Vulnerabilities,"The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory (http://aix.software.ibm.com/aix/efixes/security/openssl_advisory15.asc) to obtain more information
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  IBM AIX OpenSSL Advisory: AIX 5.3, 6.1, 7.1, 7.2 (https://www14.software.ibm.com/webapp/iwm/web/preLogin.do?source=aixbp)","AIX is prone to the following vulnerabilities: 
- OpenSSL allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an RSA PSS ASN.1 signature that lacks a mask generation function parameter.
 
- The ASN1_TFLG_COMBINE implementation in OpenSSL mishandles 
        errors caused by malformed X509_ATTRIBUTE data, which allows remote 
        attackers to obtain sensitive information from process memory by 
        triggering a decoding failure in a PKCS#7 or CMS application.
 
- OpenSSL when used for a multi-threaded client, writes the 
        PSK identity hint to an incorrect data structure, which allows remote
        servers to cause a denial of service (race condition and double free)
        via a crafted ServerKeyExchange message.

Affected Platforms: AIX 5.3, 6.1, 7.1, 7.2 are affected
 Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.",Exploitation could allow an attacker to cause a denial of service or remotely execute code.
"CVE-2015-7973,CVE-2015-7977,CVE-2015-7979,CVE-2015-8139,CVE-2015-8140,CVE-2015-8158",App2,$1500000,3,7.5,0.85,1,0.8,5.1000000000000005,15.3,IBM,AIX 6.1,IBM AIX NTP Multiple Vulnerabilities,"The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory (http://aix.software.ibm.com/aix/efixes/security/ntp_advisory6.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  IBM AIX NTP Multiple Vulnerabilities: AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2 (ftp://aix.software.ibm.com/aix/efixes/security/ntp_fix6.tar)","AIX is prone to the following vulnerabilities:  
 NTP could allow a remote attacker to launch a replay attack. An attacker could exploit this vulnerability using authenticated broadcast mode packets to conduct a replay attack and gain unauthorized access to the system. 
 NTP is vulnerable to a denial of service, caused by a NULL pointer dereference. By sending a specially crafted ntpdc reslist command, an attacker could exploit this vulnerability to cause a segmentation fault.  NTP could allow a remote attacker to bypass security restrictions. By sending specially crafted broadcast packets with bad authentication, an attacker could exploit this vulnerability to cause the target broadcast client to tear down the association with the broadcast server. 
 NTP could allow a remote attacker to obtain sensitive information, caused by an origin leak in ntpq and ntpdc. An attacker could exploit this vulnerability to obtain sensitive information 
 NTP could allow a remote attacker to launch a replay attack. An attacker could exploit this vulnerability using ntpq to conduct a replay attack and gain unauthorized access to the system information. 
 NTP is vulnerable to a denial of service, caused by the improper processing of incoming packets by ntpq. By sending specially crafted data, an attacker could exploit this vulnerability to cause the application to enter into an infinite loop. 
 
 Affected Platforms: 
AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2
 Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results. APAR versions: IV84269m9a,IV83984m4a,IV83984m5a,IV83984m6a,IV83992s5a,IV83984s7,IV83993m4b,IV83993m5a,IV83993m6a,IV83994m1a,IV83983s5a,IV83994s2,IV83995m0a,IV83995m1a,IV83983s5a",Exploitation could allow an attacker to launch a replay attack or cause a denial of service.
"CVE-2016-2775,CVE-2016-2776",App2,$1500000,3,7.5,0.85,1,0.8,5.1000000000000005,15.3,IBM,AIX 6.1,IBM AIX BIND Denial of Service Vulnerability (bind_advisory13),"The vendor has released fixes to resolve this vulnerability. Refer to AIX bind_advisory13 (http://aix.software.ibm.com/aix/efixes/security/bind_advisory13.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  bind_advisory13: AIX 5.3, 6.1, 7.1 and 7.2 (Bind) (https://aix.software.ibm.com/aix/efixes/security/bind_fix13.tar)","AIX is prone to the following vulnerabilities: 
 ISC BIND is vulnerable to a denial of service, caused by an assertion failure in buffer.c while a nameserver is building responses to a specifically constructed request.(CVE-2016-2776) 
ISC BIND is vulnerable to a denial of service, caused by an error when lwresd or the named lwres option is enabled.(CVE-2016-2775) 
Affected Platforms:
AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2
 
Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.
 
APAR versions: 
IV90056m9a,IV90056,IV89828m5a,IV89828m6a,IV89828m7a,IV89828,IV89830m5a,IV89830m6d,IV89830m7a,IV89829m1a,IV89829m1a,IV89829m2a,IV89830,IV89829,IV89831m1a,IV89831m1a,IV89831m2a,IV89831",Exploitation could result in a denial of service condition.
CVE-2016-8610,App2,$1500000,3,7.5,0.85,1,0.8,5.1000000000000005,15.3,IBM,AIX 6.1,IBM AIX OpenSSL Denial of Service Vulnerability (openssl_advisory22),"The vendor has released fixes to resolve this vulnerability. Refer to AIX openssl_advisory22 (http://aix.software.ibm.com/aix/efixes/security/openssl_advisory22.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  AIX openssl_advisory22: AIX 5.3, 6.1, 7.1 and 7.2 (OpenSSL) (https://aix.software.ibm.com/aix/efixes/security/openssl_fix22.tar)","IBM AIX SSL/TLS protocol is prone to a denial of service vulnerability. The vulnerability is caused by an error when processing ALERT packets during a SSL handshake.  
Note: This vulnerability is called ""SSL-Death-Alert"".
  Affected Versions:-  
AIX 5.3,6.1, 7.1, 7.2 
 
Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.
 
APAR versions: 
517_ifix, fips_ifix","By sending specially-crafted plain-text ALERT packets, a remote attacker could exploit this vulnerability to cause the application to stop responding."
"CVE-2016-8864,CVE-2016-2848",App2,$1500000,3,7.5,0.85,1,0.8,5.1000000000000005,15.3,IBM,AIX 6.1,IBM AIX BIND Denial of Service Vulnerability (bind_advisory14),"The vendor has released fixes to resolve this vulnerability. Refer to AIX bind_advisory14 (https://aix.software.ibm.com/aix/efixes/security/bind_advisory14.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  AIX bind_advisory14: AIX 6.1, 7.1 (Bind) (http://aix.software.ibm.com/aix/efixes/security/bind_fix14.tar)","There are two vulnerabilities in BIND that impact AIX.  
1. SC BIND is vulnerable to a denial of service, caused by the
    improper handling of responses containing a DNAME answer in db.c or
    resolver.c. By sending a recursive response, a remote attacker could 
    exploit this vulnerability to trigger an assertion failure. (CVE-2016-8864)  
2. ISC BIND is vulnerable to a denial of service. By sending a
    specially crafted DNS packet with malformed options, a remote attacker could 
    exploit this vulnerability to trigger an assertion failure.  (CVE-2016-2848)  
Affected Versions: -  
AIX 6.1, 7.1
 
Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.
 
APAR versions: 
IV91253m9b,IV91253,IV91254m6b,IV91254m7b,IV91254m8b,IV91254,IV91214m4b,IV91214m5b,IV91214m6a,IV91255m1b,IV91255m2a,IV91255m3c,IV91214,IV91255,IV91256m1b,IV91256m2b,IV91257m0a,IV91257m1a,IV91256,IV91257","Successful exploitation allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a DNAME record in the answer section of a response to a recursive query, related to db.c and resolver.c."
CVE-2016-9131,App2,$1500000,3,7.5,0.85,1,0.8,5.1000000000000005,15.3,IBM,AIX 6.1,IBM AIX BIND Denial of Service Vulnerability (bind_advisory15),"The vendor has released fixes to resolve this vulnerability. Refer to AIX bind_advisory15 (https://aix.software.ibm.com/aix/efixes/security/bind_advisory15.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  AIX bind_advisory15: AIX 5.3, 6.1, 7.1, 7.2 (Bind) (https://aix.software.ibm.com/aix/efixes/security/bind_fix15.tar)","ISC BIND is vulnerable to a denial of service, caused by the
    improper handling of responses during recursion. By sending a malformed 
    response to a RTYPE ANY query, a remote attacker could exploit this 
    vulnerability to trigger an assertion failure.
Affected Versions:  
AIX 5.3, 6.1, 7.1, 7.2
 
APAR versions: 
IV93403m3a,IV93403m3a,IV93403m3a,IV93365m1a,IV93365m1a,IV93362m8a,IV93362m8a,IV93362m8a,IV93363m3a,IV93363m3a,IV93363m3a,IV93361m8a,IV93361m8a,IV93361m8a,IV93366m9a 
 
Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.",Successful exploitation allows remote attackers to cause a denial of service (assertion failure).
CVE-2018-0732,App10,$45000,3,7.5,0.85,1,0.8,5.1000000000000005,15.3,IBM,AIX 6.1,IBM Advanced Interactive eXecutive (AIX) Open Secure Sockets Layer (OpenSSL) Transport Layer Security (TLS) Handshake Denial Of Service (DoS) Vulnerability (openssl_advisory28),"The vendor has released fixes to resolve this vulnerability. Refer to AIX openssl_advisory28 (http://aix.software.ibm.com/aix/efixes/security/openssl_advisory28.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  openssl_advisory28 (http://aix.software.ibm.com/aix/efixes/security/openssl_advisory28.asc)","OpenSSL is vulnerable to a denial of service, caused by the sending of a very large prime value to the client by a malicious server during key agreement in a TLS handshake. By spending an unreasonably long period of time generating a key for this prime, a remote attacker could exploit this vulnerability to cause the client to hang.

Affected Platforms: 
AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2  
 Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.

QID Detection Logic (Authenticated): 
The detection checks for installed packages version via command : - ""lslpp -L"".  
It also checks for interim fixes installed using the command ""emgr -c"" or ""instfix -k"". 
The detection posts vulnerable if installed package version is less than patched version and interim fixes are also not installed.",A remote attacker could exploit this vulnerability to cause the client to hang.
"CVE-2021-25122,CVE-2021-35619,CVE-2021-35551,CVE-2021-35557,CVE-2021-35558,CVE-2021-26272",App10,$45000,3,7.5,0.85,1,0.8,5.1000000000000005,15.3,Oracle,AIX 6.1,Oracle Database 12.2.0.1 Critical Patch Update - October 2021 (Unauthenticated),"Customers are requested to refer to CPUOct2021 (https://support.oracle.com/rs?type=doc&id=2796575.1) to obtain details about how to deploy the update. 
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  CPUOCT2021 (https://support.oracle.com/rs?type=doc&id=2796575.1)","Oracle Database quarterly patches are proactive cumulative patches containing recommended bug fixes that are released on a regular schedule. 
Affected Software: 
Oracle Database 12.2.0.1 
QID Detection Logic (Unauthenticated): 
This QID connects the remote server's Oracle listener and reviews the Oracle banner version.",Successful exploitation could allow an attacker to compromise the database.
"CVE-2021-25122,CVE-2021-35619,CVE-2021-35551,CVE-2021-35557,CVE-2021-35558,CVE-2021-26272",App2,$1500000,3,7.5,0.85,1,0.8,5.1000000000000005,15.3,Oracle,AIX 6.1,Oracle Database 12.2.0.1 Critical Patch Update - October 2021 (Unauthenticated),"Customers are requested to refer to CPUOct2021 (https://support.oracle.com/rs?type=doc&id=2796575.1) to obtain details about how to deploy the update. 
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  CPUOCT2021 (https://support.oracle.com/rs?type=doc&id=2796575.1)","Oracle Database quarterly patches are proactive cumulative patches containing recommended bug fixes that are released on a regular schedule. 
Affected Software: 
Oracle Database 12.2.0.1 
QID Detection Logic (Unauthenticated): 
This QID connects the remote server's Oracle listener and reviews the Oracle banner version.",Successful exploitation could allow an attacker to compromise the database.
"CVE-2021-25122,CVE-2021-35619,CVE-2021-35551,CVE-2021-35557,CVE-2021-35558,CVE-2021-26272",App3,$900000,3,7.5,0.85,1,0.8,5.1000000000000005,15.3,Oracle,AIX 6.1,Oracle Database 12.2.0.1 Critical Patch Update - October 2021 (Unauthenticated),"Customers are requested to refer to CPUOct2021 (https://support.oracle.com/rs?type=doc&id=2796575.1) to obtain details about how to deploy the update. 
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  CPUOCT2021 (https://support.oracle.com/rs?type=doc&id=2796575.1)","Oracle Database quarterly patches are proactive cumulative patches containing recommended bug fixes that are released on a regular schedule. 
Affected Software: 
Oracle Database 12.2.0.1 
QID Detection Logic (Unauthenticated): 
This QID connects the remote server's Oracle listener and reviews the Oracle banner version.",Successful exploitation could allow an attacker to compromise the database.
"CVE-2021-35560,CVE-2021-35586,CVE-2021-35578,CVE-2021-35564,CVE-2021-35559,CVE-2021-35556,CVE-2021-35565,CVE-2021-35588",App10,$45000,3,7.5,0.85,1,0.8,5.1000000000000005,15.3,IBM,AIX 6.1,"IBM Java Software Development Kit (SDK) Multiple Vulnerabilities (Oracle October 19 2021 CPU (1.7.0_321, 1.8.0_311))","Latest service refresh packs are available at  IBM SDK, Java Technology Edition Download (https://developer.ibm.com/javasdk/downloads/).  
Refer to Oracle October 19 2021 CPU  (https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities#Oracle_October_19_2021_CPU) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  IBM Java SDK(Oracle October 19 2021 CPU (1.7.0_321, 1.8.0_311)) (https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities#Oracle_October_19_2021_CPU)","IBM Java SDK are prone to multiple vulnerabilities that can be exploited by malicious people to disclose certain sensitive information, manipulate certain data, bypass certain security restrictions, cause a denial of service and compromise a vulnerable system.

Affected Versions: 
IBM Java SDK prior to 7.0.11.0  
IBM Java SDK prior to 7.1.5.0  
IBM Java SDK prior to 8.0.7.0

NOTE:  
CVE-2021-35560 and CVE-2021-35578 are affected to IBM Java 8 only.

QID Detection Logic (Authenticated): 
The QID  runs ""java -version"" command to check if vulnerable IBM Java is installed on the system.","Successful exploitation of these vulnerabilities may affect the Confidentiality, Integrity and Availability."
CVE-2021-4104,App3,$900000,3,7.5,0.85,1,0.8,5.1000000000000005,15.3,Apache,AIX 6.1,Apache Log4j 1.2 Remote Code Execution Vulnerability,"Customers are advised to upgrade their Log4j to the version in 2.16. If updating the version is not possible, please refer to the mitigations mentioned here Log4j (https://logging.apache.org/log4j/2.x/security.html). Workaround: Audit your logging configuration to ensure it has no JMSAppender configured. Log4j 1.2 configurations without JMSAppender are not impacted by this vulnerability. 
Log4j 1.x does not have Lookups, so the risk is lower. Applications using Log4j 1.x are only vulnerable to this attack when they use JNDI in their configuration.","Apache Log4j is a Java-based logging utility. It is part of the Apache Logging Services, a project of the Apache Software Foundation. 
The JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration. 
 The attacker can provide TopicBindingName and TopicConnectionFactoryBindingName configurations causing JMSAppender to perform JNDI requests that result in remote code execution in a similar fashion to CVE-2021-44228.

Affected versions: 
Log4j version 1.2

QID Detection: (Authenticated) - Linux 
This detection is based on querying the OS package managers on the target. If the target has a log4j package with a version in 1.2, the target is flagged as potentially vulnerable.

QID Detection: (Authenticated) - Windows 
On Windows system, the QID identifies vulnerable instance of log4j via WMI to check log4j included in the running processes via command-line.",Successful exploitation of this vulnerability could lead to  remote code execution (RCE) on the target.
CVE-2017-1541,App2,$1500000,3,7.3,0.85,1,0.8,4.964,14.892000000000001,IBM,AIX 6.1,IBM AIX Java Multiple Vulnerabilities (java_july2017_advisory),"The vendor has released fixes to resolve this vulnerability. Refer to AIX Java6_advisory16 (http://aix.software.ibm.com/aix/efixes/security/java6_advisory.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  Java6_advisory (https://www-945.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~WebSphere&product=ibm/IBM+SDKs+for+Java+Technology/Java+Standard+Edition+%28Java+SE%29&release=6.0.0.0&platform=AIX+32-bit,+pSeries&function=all)","There is a vulnerability in the AIX IBM Java 6 SDK installp and updatep
 packages. 
A flaw in the AIX JRE/SDK installp and updatep packages 
        prevented the java.security, java.policy and javaws.policy files 
        from being updated correctly. 
Affected Versions:  
AIX 5.3, 6.1, 7.1, 7.2  
APAR versions:
J632SR16F3, J632SR16F4, J632SR16F5, J632SR16F7, J632S16F15, J632S16F20, J632S16F26, J632S16F30, J632S16F35, J632S16F41, J632S16F45

Note:The detection requires root privileges to run ""emgr -c"" or ""instfix -k"" to check for patches. In absence of such privileges, the detection may not output actual results.","Successful exploitation allows remote attackers to affect confidentiality, integrity, and availability impact."
CVE-2018-14665,App3,$900000,3,6.6,0.85,1,0.8,4.4879999999999995,13.463999999999999,IBM,AIX 6.1,IBM AIX Xorg Privilege Escalation Vulnerability(xorg_advisory3),"The vendor has released fixes to resolve this vulnerability. Refer to AIX xorg_advisory3 (http://aix.software.ibm.com/aix/efixes/security/xorg_advisory3.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  xorg_advisory3 (http://aix.software.ibm.com/aix/efixes/security/xorg_advisory3.asc)"," X.Org X server could allow a remote authenticated attacker to gain elevated privileges on the system, caused by improper validation of command line parameters.

Affected Versions:  
AIX 6.1, 7.1, 7.2

Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.

QID Detection Logic (Authenticated):  
The detection checks for installed packages version via command: - ""lslpp -L"". It also checks for interim fixes installed using the command ""emgr -c"" or ""instfix -k"". The detection posts vulnerable if installed package version is less than patched version and interim fixes are also not installed.",An attacker could exploit this vulnerability using the -modulepath argument or the -logfile argument to overwrite arbitrary files and execute unprivileged code on the system.
"CVE-2016-0800,CVE-2016-0798,CVE-2016-0702,CVE-2016-0705,CVE-2016-0799,CVE-2016-0797",App10,$30000,2,9.8,0.85,1,0.8,6.664000000000001,13.328000000000001,IBM,AIX 6.1,IBM AIX OpenSSL Multiple Vulnerabilities,"The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory (http://aix.software.ibm.com/aix/efixes/security/openssl_advisory18.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  IBM AIX OpenSSL Multiple Vulnerabilities : AIX 5.3, 6.1, 7.1, 7.2 (https://www14.software.ibm.com/webapp/iwm/web/preLogin.do?source=aixbp)","AIX is prone to the following vulnerabilities: A cross-protocol attack was discovered that could lead to 
	    decryption of TLS sessions by using a server supporting 
	    SSLv2 and EXPORT cipher suites as a Bleichenbacher RSA 
	    padding oracle. This vulnerability is known as DROWN.
 
The fmtstr function improperly calculates string lengths, 
	    which allows remote attackers to cause a denial of service 
	    (overflow and out-of-bounds read) or possibly have 
	    unspecified other impact via a long string.
 
An attacker with an invalid username connecting to SRP 
	    servers that is configured with a secret seed to hide 
	    valid login information are vulnerable to a memory leak 
	    of around 300 bytes per connection.
 
Multiple integer overflows allow remote attackers to cause
	    a denial of service (heap memory corruption or NULL pointer 
	    dereference) or possibly have unspecified other impact via 
	    a long digit string that is mishandled by the BN_dec2bn or 
	    BN_hex2bn function.
 
A double free bug was discovered when OpenSSL parses 
	    malformed DSA private keys and could lead to a DoS attack 
	    or memory corruption for applications that receive DSA 
	    private keys from untrusted sources.
 
A side-channel attack was found which makes use of cache-bank 
	    conflicts on the Intel Sandy-Bridge microarchitecture which 
	    could lead to the recovery of RSA keys.
 Affected Platforms: AIX 5.3, 6.1, 7.1, 7.2
 Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results. APAR versions: IV83169m9b,IV83169m9a,IV83169s9d,IV83169m9c",Exploitation could lead to buffer overflow or disclosure of sensitive information.
"CVE-2016-2176,CVE-2016-2109,CVE-2016-2108,CVE-2016-2106,CVE-2016-2105",App10,$30000,2,9.8,0.85,1,0.8,6.664000000000001,13.328000000000001,IBM,AIX 6.1,IBM AIX OpenSSL Multiple Vulnerabilities,"The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory (http://aix.software.ibm.com/aix/efixes/security/openssl_advisory20.asc) to obtain more information
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  openssl_advisory20.asc: AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2 (ftp://aix.software.ibm.com/aix/efixes/security/openssl_advisory20.asc.sig)","AIX is prone to the following vulnerabilities: 
 OpenSSL could allow a remote attacker to obtain sensitive information, by sending an overly long ASN.1 string to the X509_NAME_oneline() function. (CVE-2016-2176) 
OpenSSL could allow a remote attacker to execute arbitrary code on the system, caused by a buffer underflow when deserializing untrusted ASN.1 structures and later reserializes them. (CVE-2016-2108) 
OpenSSL is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by the EVP_EncryptUpdate() function. (CVE-2016-2105, CVE-2016-2106) 
 Affected Platforms: AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2 Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.",An attacker could exploit this vulnerability to consume all available resources and exhaust memory.
"CVE-2016-2177,CVE-2016-2178,CVE-2016-2179,CVE-2016-2180,CVE-2016-2181,CVE-2016-2182,CVE-2016-2183,CVE-2016-6302,CVE-2016-6303,CVE-2016-6304,CVE-2016-6306,CVE-2016-7052",App10,$30000,2,9.8,0.85,1,0.8,6.664000000000001,13.328000000000001,IBM,AIX 6.1,IBM AIX OpenSSL Multiple Vulnerabilities (openssl_advisory21),"The vendor has released fixes to resolve this vulnerability. Refer to AIX openssl_advisory21 (http://aix.software.ibm.com/aix/efixes/security/openssl_advisory21.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  AIX openssl_advisory21: AIX 5.3, 6.1, 7.1 and 7.2 (OpenSSL) (https://www14.software.ibm.com/webapp/iwm/web/preLogin.do?source=aixbp)","AIX is prone to the following vulnerabilities: 
 OpenSSL is vulnerable to a denial of service, caused by the incorrect use of pointer arithmetic for heap-buffer boundary checks.(CVE-2016-2177) 
OpenSSL could allow a remote attacker to obtain sensitive information, caused by an error in the DSA implementation that allows the following of a non-constant time codepath for certain operations. (CVE-2016-2178) 
OpenSSL is vulnerable to a denial of service. By sending specially crafted DTLS record fragments to fill up buffer queues, a remote attacker could exploit this vulnerability to open a large number of simultaneous connections and consume all available memory resources. (CVE-2016-2179) 
OpenSSL is vulnerable to a denial of service, caused by an out-of-bounds read in the TS_OBJ_print_bio function.(CVE-2016-2180) 
OpenSSL is vulnerable to a denial of service, caused by an error in the DTLS replay protection implementation.(CVE-2016-2181) 
OpenSSL is vulnerable to a denial of service, caused by an out-of-bounds write in the TS_OBJ_print_bio function in crypto/bn/bn_print.c. (CVE-2016-2182) 
OpenSSL could allow a remote attacker to obtain sensitive information, caused by an error in the in the Triple-DES on 64-bit block cipher, used as a part of the SSL/TLS protocol. (CVE-2016-2183) 
OpenSSL is vulnerable to a denial of service, caused by the failure to consider the HMAC size during validation of the ticket length by the tls_decrypt_ticket function. (CVE-2016-6302) 
OpenSSL is vulnerable to a denial of service, caused by an integer overflow in the MDC2_Update function.(CVE-2016-6303) 
OpenSSL is vulnerable to a denial of service. By repeatedly requesting renegotiation, a remote authenticated attacker could send an overly large OCSP Status Request extension to consume all available memory resources. (CVE-2016-6304) 
OpenSSL is vulnerable to a denial of service, caused by missing message length checks when parsing certificates. (CVE-2016-6306) 
OpenSSL is vulnerable to a denial of service, caused by a missing CRL sanity check. By attempting to use CRLs, a remote attacker could exploit this vulnerability to cause the application to crash. (CVE-2016-7052)
 Affected Platforms: AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2

Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.",An attacker could exploit this vulnerability to consume all available resources and exhaust memory.
CVE-2016-2842,App10,$30000,2,9.8,0.85,1,0.8,6.664000000000001,13.328000000000001,IBM,AIX 6.1,IBM AIX OpenSSL Denial of Service Vulnerability,"The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory (http://aix.software.ibm.com/aix/efixes/security/openssl_advisory19.asc) to obtain more information
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  IBM AIX OpenSSL Denial of Service Vulnerability: AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2 (ftp://aix.software.ibm.com/aix/efixes/security/openssl_fix18.tar)","AIX is prone to the following vulnerabilities:  OpenSSL is vulnerable to a denial of service, caused by the failure to verify that a certain memory allocation succeeds by the doapr_outch function. A remote attacker could exploit this vulnerability using a specially crafted string to cause an out-of-bounds write or consume an overly large amount of resources.   Affected Platforms: AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2 Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.",A remote attacker could exploit this vulnerability using a specially crafted string to cause an out-of-bounds write or consume an overly large amount of resources.
"CVE-2016-3115,CVE-2016-1908",App10,$30000,2,9.8,0.85,1,0.8,6.664000000000001,13.328000000000001,IBM,AIX 6.1,IBM AIX OpenSSH Remote Code Execution Vulnerability,"The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory (http://aix.software.ibm.com/aix/efixes/security/openssh_advisory8.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  IBM AIX OpenSSH Remote Code Execution Vulnerability: AIX 5.3, 6.1, 7.1, 7.2 (https://aix.software.ibm.com/aix/efixes/security/openssh_fix8.tar)","IBM AIX is prone to the following vulnerabilities:
 
OpenSSH could allow a remote authenticated attacker to
        execute arbitrary commands on the system, caused by improper
        validation of user-supplied X11 authentication credentials by the sshd
        server. By sending specially crafted X11 credential data, an attacker
        could exploit this vulnerability to inject xauth commands and execute
        arbitrary commands on the system with the privileges of the victim.
 
OpenSSH could allow a remote authenticated attacker to bypass
        security restrictions, caused by the improper handling of errors when
        generating authentication cookies for untrusted X11 forwarding. An
        attacker could exploit this vulnerability to gain access to the target
        local X server.
 
Affected Platforms: 
AIX 5.3, 6.1, 7.1 and 7.2
 
Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results. APAR versions: IV84698m9a,IV84698m9b",Exploitation could allow a remote attacker to execute arbitrary code.
"CVE-2016-7922,CVE-2016-7923,CVE-2016-7924,CVE-2016-7925,CVE-2016-7926,CVE-2016-7927,CVE-2016-7928,CVE-2016-7930,CVE-2016-7931,CVE-2016-7932,CVE-2016-7933,CVE-2016-7934,CVE-2016-7935,CVE-2016-7936,CVE-2016-7937,CVE-2016-7939,CVE-2016-7940,CVE-2016-7973,CVE-2016-7974,CVE-2016-7975,CVE-2016-7983,CVE-2016-7984,CVE-2016-7992,CVE-2016-7993,CVE-2016-8574,CVE-2016-8575,CVE-2017-5202,CVE-2017-5203,CVE-2017-5204,CVE-2017-5482,CVE-2017-5483,CVE-2017-5484,CVE-2017-5485,CVE-2017-5486",App10,$30000,2,9.8,0.85,1,0.8,6.664000000000001,13.328000000000001,IBM,AIX 6.1,IBM AIX tcpdump Buffer Overflow Vulnerabilities (tcpdump_advisory2),"The vendor has released fixes to resolve this vulnerability. Refer to AIX tcpdump_advisory2 (http://aix.software.ibm.com/aix/efixes/security/tcpdump_advisory2.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  AIX tcpdump_advisory2: AIX 5.3, 6.1, 7.1, 7.2 (tcpdump) (https://aix.software.ibm.com/aix/efixes/security/tcpdump_fix2.tar )","AIX is prone to the following vulnerabilities:
 
tcpdump is vulnerable to multiple buffer overflow vulnerabilities caused by improper bounds checking by the parser.
 
Affected Platforms: 
AIX 5.3, 6.1, 7.1, 7.2
 Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results. APAR versions: IV94729s9b, IV94728s9c,IV94727s9b,IV94726s4c,IV94724s4b,IV94723s2a",Exploitation might allow a remote attacker to cause the application to crash.
"CVE-2017-10108,CVE-2017-1376,CVE-2017-1541,CVE-2017-10053,CVE-2017-10067,CVE-2017-10078,CVE-2017-10087,CVE-2017-10089,CVE-2017-10090,CVE-2017-10096,CVE-2017-10101,CVE-2017-10102,CVE-2017-10105,CVE-2017-10107,CVE-2017-10109,CVE-2017-10110,CVE-2017-10115,CVE-2017-10116,CVE-2017-10125,CVE-2017-10243",App10,$30000,2,9.8,0.85,1,0.8,6.664000000000001,13.328000000000001,IBM,AIX 6.1,IBM AIX Java Multiple Vulnerabilities (java_july2017_advisory),"The vendor has released fixes to resolve this vulnerability. Refer to AIX java_july2017_advisory (http://aix.software.ibm.com/aix/efixes/security/java_july2017_advisory.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  java_july2017_advisory: AIX (https://aix.software.ibm.com/aix/efixes/security/java_july2017_advisory.asc)","There are multiple vulnerabilities in IBM SDK Java Technology Edition Versions 6, 7, 7.1, 8 that are used by AIX. These issues were disclosed as part of the IBM Java SDK updates in July 2017.
 
Affected Versions:-  
AIX 5.3, 6.1, 7.1, 7.2","Successful exploitation allows remote attackers to affect confidentiality, integrity, and availability impact."
"CVE-2017-13024,CVE-2017-12996,CVE-2017-12995,CVE-2017-13027,CVE-2017-12993,CVE-2017-13021,CVE-2017-13022,CVE-2017-12990,CVE-2017-13028,CVE-2017-13029,CVE-2017-12999,CVE-2017-12998,CVE-2017-13033,CVE-2017-13032,CVE-2017-13031,CVE-2017-13030,CVE-2017-13037,CVE-2017-13036,CVE-2017-13035,CVE-2017-13034,CVE-2017-13039,CVE-2017-13038,CVE-2017-11541,CVE-2017-11543,CVE-2017-11542,CVE-2017-13687,CVE-2017-13725,CVE-2017-13688,CVE-2017-13689,CVE-2017-13046,CVE-2017-13047,CVE-2017-13044,CVE-2017-13045,CVE-2017-13042,CVE-2017-13043,CVE-2017-13040,CVE-2017-13041,CVE-2017-13048,CVE-2017-13049,CVE-2017-12997,CVE-2017-13025,CVE-2017-13026,CVE-2017-12994,CVE-2017-13020,CVE-2017-12992,CVE-2017-13690,CVE-2017-12991,CVE-2017-13023,CVE-2017-13055,CVE-2017-13054,CVE-2017-13051,CVE-2017-13050,CVE-2017-13053,CVE-2017-13052,CVE-2017-12893,CVE-2017-12896,CVE-2017-12897,CVE-2017-12894,CVE-2017-12895,CVE-2017-12898,CVE-2017-12899,CVE-2017-13019,CVE-2017-12989,CVE-2017-12985,CVE-2017-12986,CVE-2017-12987,CVE-2017-13008,CVE-2017-13009,CVE-2017-13002,CVE-2017-13003,CVE-2017-13000,CVE-2017-13001,CVE-2017-13006,CVE-2017-13004,CVE-2017-13005,CVE-2017-12900,CVE-2017-12901,CVE-2017-12902,CVE-2017-12988,CVE-2017-13018,CVE-2017-13011,CVE-2017-13010,CVE-2017-13013,CVE-2017-13012,CVE-2017-13015,CVE-2017-13014,CVE-2017-13017,CVE-2017-13016",App10,$30000,2,9.8,0.85,1,0.8,6.664000000000001,13.328000000000001,IBM,AIX 6.1,IBM AIX tcpdump Multiple Vulnerabilities (tcpdump_advisory3),"The vendor has released fixes to resolve this vulnerability. Refer to AIX tcpdump_advisory3 (http://aix.software.ibm.com/aix/efixes/security/tcpdump_advisory3.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  tcpdump_advisory3: AIX 5.3, 6.1, 7.1, 7.2 (tcpdump) (https://aix.software.ibm.com/aix/efixes/security/tcpdump_fix2.tar )","AIX is prone to the following vulnerabilities:
 
tcpdump is vulnerable to multiple buffer overflow vulnerabilities caused by improper bounds checking by the parser.
 
Affected Platforms: 
AIX 5.3, 6.1, 7.1, 7.2
 Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results. APAR versions:
 IV94728mAa,IV94727m9a,IV94726m5a,IV94724m5a,IV94723m3a,IV94729m9a",Exploitation might allow a remote attacker to cause the application to crash.
"CVE-2017-3514,CVE-2017-3512,CVE-2017-3511,CVE-2017-3509,CVE-2017-3544,CVE-2017-3533,CVE-2017-3539,CVE-2017-1289,CVE-2016-9840,CVE-2016-9841,CVE-2016-9842,CVE-2016-9843",App10,$30000,2,9.8,0.85,1,0.8,6.664000000000001,13.328000000000001,IBM,AIX 6.1,IBM AIX Java Multiple Vulnerabilities (java_apr2017_advisory),"The vendor has released fixes to resolve this vulnerability. Refer to AIX java_apr2017_advisory (http://aix.software.ibm.com/aix/efixes/security/java_apr2017_advisory.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  java_apr2017_advisory (IBM SDK Version 6 ) (https://www-945.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~WebSphere&product=ibm/IBM+SDKs+for+Java+Technology/Java+Standard+Edition+%28Java+SE%29&release=6.0.0.0&platform=AIX+32-bit,+pSeries&function=all)  java_apr2017_advisory (IBM SDK Version 7) (https://www-945.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~WebSphere&product=ibm/IBM+SDKs+for+Java+Technology/Java+Standard+Edition+%28Java+SE%29&release=7.0.0.0&platform=AIX+32-bit,+pSeries&function=all )  java_apr2017_advisory (IBM SDK Version 7R1) (https://www-945.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~WebSphere&product=ibm/IBM+SDKs+for+Java+Technology/Java+Standard+Edition+%28Java+SE%29&release=7.1.0.0&platform=AIX+32-bit,+pSeries&function=all)  java_apr2017_advisory (IBM SDK Version 8) (https://www-945.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~WebSphere&product=ibm/IBM+SDKs+for+Java+Technology/Java+Standard+Edition+%28Java+SE%29&release=8.0.0.0&platform=AIX+32-bit,+pSeries&function=all)","There are multiple vulnerabilities in IBM SDK Java Technology Edition Versions 6, 7, 7.1, 8 that are used by AIX. These issues were disclosed as part of the IBM Java SDK updates in January 2017.
The following vulnerabilities exists in IBM AIX:-  
1. An unspecified vulnerability in Oracle Java SE related to the Java 
SE AWT component could allow an unauthenticated attacker to take control of the 
system. (CVE-2017-3514)  
2. An unspecified vulnerability in Oracle Java SE related to the 
Java SE AWT component could allow an unauthenticated attacker to take control 
of the system.(CVE-2017-3512)  
3. An unspecified vulnerability in Oracle Java SE related to the Java SE, 
Java SE Embedded, JRockit JCE component could allow an unauthenticated attacker to 
take control of the system. (CVE-2017-3511)  
4.  An unspecified vulnerability in Oracle Java SE related to the Java SE, 
Java SE Embedded Networking component could allow an unauthenticated attacker to 
cause low confidentiality impact, low integrity impact, and no availability impact. (CVE-2017-3509)  
5. An unspecified vulnerability in Oracle Java SE related to the Java SE, 
Java SE Embedded, JRockit Networking component could allow an unauthenticated 
attacker to cause no confidentiality impact, low integrity impact, and no availability 
impact.(CVE-2017-3544)  
6. An unspecified vulnerability in Oracle Java SE related to the Java SE, 
Java SE Embedded, JRockit Networking component could allow an unauthenticated 
attacker to cause no confidentiality impact, low integrity impact, and no availability 
impact.(CVE-2017-3533)  
7. An unspecified vulnerability in Oracle Java SE related to the Java SE, 
Java SE Embedded Security component could allow an unauthenticated attacker to cause 
no confidentiality impact, low integrity impact, and no availability impact. (CVE-2017-3539)  
8. IBM SDK, Java Technology Edition is vulnerable XML External Entity Injection 
(XXE) error when processing XML data. A remote attacker could exploit this vulnerability to 
expose highly sensitive information or consume memory resources. (CVE-2017-1289)  
9. zlib is vulnerable to a denial of service, caused by an out-of-bounds pointer 
arithmetic in inftrees.c. By persuading a victim to open a specially crafted document, a 
remote attacker could exploit this vulnerability to cause a denial of service.(CVE-2016-9840 - CVE-2016-9843)

Affected Versions:-  
AIX 5.3, 6.1, 7.1, 7.2","Successful exploitation allows remote attackers to affect confidentiality, integrity, and availability impact."
CVE-2021-41035,App3,$600000,2,9.8,0.85,1,0.8,6.664000000000001,13.328000000000001,IBM,AIX 6.1,IBM Java Software Development Kit (SDK) Security Vulnerability (IBM Security Update November 2021),"Latest service refresh packs are available at  IBM SDK, Java Technology Edition Download (https://developer.ibm.com/javasdk/downloads/).  
Refer to IBM Security Update November 2021  (https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities#Oracle_November_2021) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  IJ35976 (https://www.ibm.com/support/pages/apar/IJ35976)","Eclipse Openj9 could provide weaker than expected security, caused by the failure to throw IllegalAccessError for MethodHandles that invoke inaccessible interface methods.

Affected Versions: 
IBM Java SDK  Prior to  7.0.11.0 
IBM Java SDK Prior to 7.1.5.0  
IBM Java SDK Prior to 8.0.7.0

QID Detection Logic (Authenticated): 
The QID  runs ""java -version"" command to check if vulnerable IBM Java is installed on the system.","Successful exploitation of this vulnerability may affect the Confidentiality, Integrity and availability.."
"CVE-2016-7427,CVE-2016-7428,CVE-2016-9310,CVE-2016-9311",App2,$1500000,3,6.5,0.85,1,0.8,4.42,13.26,IBM,AIX 6.1,IBM AIX NTP Denial of Service Vulnerability (ntp_advisory8.asc),"The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory ntp_advisory8 (http://aix.software.ibm.com/aix/efixes/security/ntp_advisory8.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  AIX Advisory ntp_advisory8: AIX 6.1, 7.1, 7.2 (ntp) (https://aix.software.ibm.com/aix/efixes/security/ntp_fix8.tar)","There are multiple vulnerabilities in NTPv3 and NTPv4 that impact AIX.  
NTPv3 and NTPv4 are vulnerable to:  
1. A denial of service, caused by an error
    in broadcast mode replay prevention functionality. By sending specially 
    crafted NTP packets, a local attacker could exploit this vulnerability to 
    cause a denial of service. (CVE-2016-7427) 
2. A denial of service, caused by an error 
    in broadcast mode poll interval enforcement functionality. By sending 
    specially crafted NTP packets, a remote attacker from within the local 
    network could exploit this vulnerability to cause a denial of service.(CVE-2016-7428 )  
3. A denial of service, caused by an error 
    in the control mode (mode 6) functionality. By sending specially crafted 
    control mode packets, a remote attacker could exploit this vulnerability 
    to obtain sensitive information and cause the application to crash. (CVE-2016-9310) 
4. A denial of service, caused by a NULL 
    pointer dereference when trap service has been enabled. By sending specially 
    crafted packets, a remote attacker could exploit this vulnerability to cause
    the application to crash. (CVE-2016-9311)  
Affected Platforms: 
    AIX 6.1, AIX 7.1, AIX 7.2

APAR versions: 
IV91803,IV92287,IV91951,IV92126,IV92192

Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.",A remote attacker could exploit this vulnerability to obtain sensitive information and cause the application to crash.
CVE-2018-0739,App10,$45000,3,6.5,0.85,1,0.8,4.42,13.26,IBM,AIX 6.1,IBM Advanced Interactive eXecutive (AIX) Open Secure Sockets Layer (OpenSSL) Denial of Service (DoS) Vulnerability (openssl_advisory26),"The vendor has released fixes to resolve this vulnerability. Refer to AIX openssl_advisory26 (http://aix.software.ibm.com/aix/efixes/security/openssl_advisory26.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  openssl_advisory26 (https://aix.software.ibm.com/aix/efixes/security/openssl_fix26.tar)","OpenSSL is prone to a denial-of-service vulnerability. 
 OpenSSL could allow a remote attacker to cause a denial-of-service condition, caused by a flaw in the Constructed ASN.1 types with a recursive definition (such as can be found in PKCS7) that could eventually exceed the stack given malicious input with excessive recursion. (CVE-2017-3737)

Affected Versions:  
AIX 5.3,6.1, 7.1, 7.2 
 
Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.

QID Detection Logic (Authenticated): 
The detection checks for installed packages version via command : - ""lslpp -L"".  
It also checks for interim fixes installed using the command ""emgr -c"". 
The detection posts vulnerable if installed package version is less than patched version and interim fixes are also not installed.",An attacker can exploit this issue to cause a denial-of-service condition.
"CVE-2016-3598,CVE-2016-3511,CVE-2016-3485",App10,$30000,2,9.6,0.85,1,0.8,6.5280000000000005,13.056000000000001,IBM,AIX 6.1,IBM AIX Java Denial of Service Vulnerability,"The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory (http://aix.software.ibm.com/aix/efixes/security/java_july2016_advisory.asc) to obtain more information
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  java_july2016_advisory: AIX 5.3, 6.1, 7.1, 7.2 (https://www-933.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~WebSphere&product=ibm/IBM+SDKs+for+Java+Technology/Java+Standard+Edition+%28Java+SE%29&release=6.0.0.0&platform=AIX+32-bit,+pSeries&function=all)","There are multiple vulnerabilities in IBM SDK Java Technology Edition, Versions 6, 7, 7.1, 8 that are used by AIX.  
AIX is prone to the following vulnerabilities:  
 An unspecified vulnerability in Oracle Java SE and Java SE Embedded related to the Libraries component has high confidentiality impact, high integrity impact, and high availability impact.
 An unspecified vulnerability in Oracle Java SE related to the Deployment component has high confidentiality impact, high integrity impact, and high availability impact.
 An unspecified vulnerability in Oracle Java SE and Java SE Embedded related to the Networking component has no confidentiality impact, low integrity impact, and no availability impact.
 Affected Platforms: AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2
 Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.","Successful exploitation allows remote attackers to cause a denial of service via a malformed packet to the rndc (aka control channel) interface, related to alist.c and sexpr.c."
"CVE-2016-5552,CVE-2017-3231,CVE-2017-3241,CVE-2017-3253,CVE-2017-3259,CVE-2017-3261,CVE-2017-3272,CVE-2016-2183,CVE-2016-5548,CVE-2016-5549,CVE-2017-3252,CVE-2017-3289,CVE-2016-5547,CVE-2016-5546",App10,$30000,2,9.6,0.85,1,0.8,6.5280000000000005,13.056000000000001,IBM,AIX 6.1,IBM AIX Java Multiple Vulnerabilities (java_jan2017_advisory),"The vendor has released fixes to resolve this vulnerability. Refer to AIX java_jan2017_advisory (http://aix.software.ibm.com/aix/efixes/security/java_jan2017_advisory.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  java_jan2017_advisory: AIX 5.3, 6.1, 7.1 and 7.2 (https://www-933.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~WebSphere&product=ibm/IBM+SDKs+for+Java+Technology/Java+Standard+Edition+%28Java+SE%29&release=8.0.0.0&platform=AIX+32-bit,+pSeries&function=all)","There are multiple vulnerabilities in IBM SDK Java Technology Edition Versions 6, 7, 7.1, 8 that are used by AIX. These issues were disclosed as part of the IBM Java SDK updates in October 2016.
The following vulnerabilities exists in IBM AIX:-  
1. An unspecified vulnerability in Oracle Java SE and Java SE Embedded 
related to the Hotspot component has high confidentiality impact, high integrity
impact, and high availability impact. (CVE-2017-3289)  
2. An unspecified vulnerability in Oracle Java SE and Java SE Embedded
related to the Libraries component has high confidentiality impact, high 
integrity impact, and high availability impact.(CVE-2017-3272)  
3.An unspecified vulnerability in Oracle Java SE Java SE Embedded
and Jrockit related to the RMI component has high confidentiality impact, high
integrity impact, and high availability impact. (CVE-2017-3241)  
4.  An unspecified vulnerability in Oracle Java SE Java SE Embedded and
Jrockit related to the 2D component could allow a remote attacker to cause a 
denial of service resulting in a high availability impact using unknown attack vectors. (CVE-2017-3253)  
5. An unspecified vulnerability in Oracle Java SE Java SE Embedded and 
Jrockit related to the Libraries component has no confidentiality impact, high 
integrity impact, and no availability impact. (CVE-2016-5546)  
6. An unspecified vulnerability in Oracle Java SE and Java SE Embedded
related to the Libraries component could allow a remote attacker to obtain
sensitive information resulting in a high confidentiality impact using unknown 
attack vectors. (CVE-2016-5548)  
7. An unspecified vulnerability in Oracle Java SE and Java SE Embedded
related to the Libraries component could allow a remote attacker to obtain sensitive 
information resulting in a high confidentiality impact using unknown attack vectors.  (CVE-2016-5549)  
8. An unspecified vulnerability in Oracle Java SE Java SE Embedded
and Jrockit related to the JAAS component has no confidentiality impact, 
high integrity impact, and no availability impact. (CVE-2017-3252)  
9. An unspecified vulnerability in Oracle Java SE Java SE Embedded 
and Jrockit related to the Libraries component could allow a remote attacker
to cause a denial of service resulting in a low availability impact using unknown attack vectors.(CVE-2017-5547)

Affected Versions:-  
AIX 5.3, 6.1, 7.1, 7.2","Successful exploitation allows remote attackers to affect confidentiality, integrity, and availability impact."
"CVE-2016-5568,CVE-2016-5556,CVE-2016-5573,CVE-2016-5597,CVE-2016-5554,CVE-2016-5542",App10,$30000,2,9.6,0.85,1,0.8,6.5280000000000005,13.056000000000001,IBM,AIX 6.1,IBM AIX Java Multiple Vulnerabilities (java_oct2016_advisory),"The vendor has released fixes to resolve this vulnerability. Refer to AIX java_oct2016_advisory (https://aix.software.ibm.com/aix/efixes/security/java_oct2016_advisory.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  java_oct2016_advisory: AIX 5.3, 6.1, 7.1 and 7.2 (Java) (https://www-933.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~WebSphere&product=ibm/IBM+SDKs+for+Java+Technology/Java+Standard+Edition+%28Java+SE%29&release=6.0.0.0&platform=AIX+32-bit,+pSeries&function=all)","There are multiple vulnerabilities in IBM SDK Java Technology Edition Versions 6, 7, 7.1, 8 that are used by AIX. These issues were disclosed as part of the IBM Java SDK updates in October 2016.
The following vulnerabilities exists in IBM AIX:-  
1. An unspecified vulnerability in Oracle Java SE and Java SE 
    Embedded related to the Hotspot component has high confidentiality impact, 
    high integrity impact, and high availability impact. (CVE-2016-5582)  
2. An unspecified vulnerability in Oracle Java SE related to the
    AWT component has high confidentiality impact, high integrity impact, and
    high availability impact. (CVE-2016-5568)  
3.An unspecified vulnerability in Oracle Java SE related to the
    2D component has high confidentiality impact, high integrity impact, and high
    availability impact. (CVE-2016-5556)  
4.  An unspecified vulnerability in Oracle Java SE and Java SE 
    Embedded related to the Hotspot component has high confidentiality impact, 
    high integrity impact, and high availability impact. (CVE-2016-5573)  
5. An unspecified vulnerability in Oracle Java SE and Java SE
    Embedded related to the Networking component could allow a remote attacker 
    to obtain sensitive information resulting in a high confidentiality impact 
    using unknown attack vectors. (CVE-2016-5597)  
6. An unspecified vulnerability in Oracle Java SE and Java SE 
    Embedded related to the JMX component has no confidentiality impact, low 
    integrity impact, and no availability impact. (CVE-2016-5554)  
7. An unspecified vulnerability in Oracle Java SE and Java SE
    Embedded related to the Libraries component has no confidentiality impact, 
    low integrity impact, and no availability impact.  (CVE-2016-5542)  
Affected Versions:-  
AIX 5.3, 6.1, 7.1, 7.2","Successful exploitation allows remote attackers to affect confidentiality, integrity, and availability impact."
"CVE-2018-3139,CVE-2018-3136,CVE-2018-13785,CVE-2018-3214,CVE-2018-3180,CVE-2018-3149,CVE-2018-3169,CVE-2018-3183",App3,$600000,2,9,0.85,1,0.8,6.12,12.24,IBM,AIX 6.1,IBM AIX Java Multiple Vulnerabilities(java_oct2018_advisory),"The vendor has released fixes to resolve this vulnerability. Refer to AIX java_oct2018_advisory (http://aix.software.ibm.com/aix/efixes/security/java_oct2018_advisory.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  java_oct2018_advisory (http://aix.software.ibm.com/aix/efixes/security/java_oct2018_advisory.asc)","There are multiple vulnerabilities in IBM SDK Java Technology Edition,Versions 7, 7.1, 8 that are used by AIX. These issues were disclosed as part of the IBM Java SDK updates in October 2018.

Affected Versions: 
AIX 6.1
AIX 7.1
AIX 7.2

Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.

QID Detection Logic (Authenticated): 
The detection checks for installed packages version via command : - ""lslpp -L"". 
It also checks for interim fixes installed using the command ""emgr -c"" or ""instfix -k"".
The detection posts vulnerable if installed package version is less than patched version and interim fixes are also not installed.","Successful exploitation allows remote attackers to affect confidentiality, integrity, and availability impact."
CVE-2012-1675,App10,$135000,9,2,0.85,1,0.8,1.36,12.239999999999998,Oracle,AIX 6.1,Oracle Database TNS Listener Poison Attack Vulnerability,"Oracle has released a patch to resolve this issue. Refer to Oracle CVE-2012-1675 Alert (https://www.oracle.com/technetwork/topics/security/alert-cve-2012-1675-1608180.html) to obtain more information.

Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  Oracle Security Alert for CVE-2012-1675 (https://www.oracle.com/technetwork/topics/security/alert-cve-2012-1675-1608180.html)

Virtual Patches:
Trend Micro Virtual Patching(http://www.trendmicro.com/vulnerabilitycontrols)
Virtual Patch #1004997: 1004997 - Detected Too Many Oracle TNS Service Register Requests","A vulnerability exists in the Listener component of Oracle Database Server. Easily exploitable vulnerability allows successful unauthenticated network attacks via Oracle Net. Successful attack of this vulnerability can result in unauthorized update, insert or delete access to all Listener accessible data as well as read access to all Listener accessible data and ability to cause a partial denial of service (partial DOS) of Listener.
 
This vulnerability allows an attacker to perform a man-in-the-middle attack by registering an additional database instance in the TNS listener. The listener will then start load-balancing traffic to the new instance. This allows the attacker to receive the database transactions, record them and forward them to the original database.  The attacker could also potentially modify the transactions and execute commands on the original database server. 
 
This QID sends a request to register with the listener with the following command:
 
(CONNECT_DATA=(COMMAND=service_register_NSGR))
 
If the listener acknowledges and allows the scanner to register, then the QID is posted. If Oracle suggested solution is applied then the listener should not allow the scanner to register successfully.
 
Affected Products and Versions: 
Oracle Database 11g Release 2, versions 11.2.0.2, 11.2.0.3, 11.2.0.4 
Oracle Database 11g Release 1, version 11.1.0.7 
Oracle Database 10g Release 2, versions 10.2.0.3, 10.2.0.4, 10.2.0.5 
NOTE: Although Oracle Database prior to 10g versions are not listed in the Oracle advisory, older versions of Oracle not covered by their lifetime policy and as per advisory, they could be affected.","This vulnerability allows an attacker to receive the database transactions, record them and forward them to the original database. The attacker can potentially modify the transactions and execute commands on the original database server. 
 
This vulnerability may be remotely exploitable without authentication, i.e. it may be exploited over a network without the need for a username and password."
"CVE-2015-3197,CVE-2015-4000",App2,$1500000,3,5.9,0.85,1,0.8,4.0120000000000005,12.036000000000001,IBM,AIX 6.1,IBM AIX OpenSSL Multiple Vulnerabilities,"The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory (http://aix.software.ibm.com/aix/efixes/security/openssl_advisory17.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  IBM AIX OpenSSL Multiple Vulnerabilities: AIX 5.3, 6.1, 7.1, 7.2 (ftp://aix.software.ibm.com/aix/efixes/security/openssl_fix17.tar)","AIX is prone to the following vulnerabilities:
 
A malicious client can negotiate SSLv2 ciphers that have been 
        disabled on the server and complete SSLv2 handshakes even if all SSLv2 
        ciphers have been disabled, provided that the SSLv2 protocol was not 
        disabled via SSL_OP_NO_SSLv2.
 
A previously published vulnerability in the TLS protocol 
        allows a man-in-the-middle attacker to downgrade vulnerable TLS 
        connections using ephemeral Diffie-Hellman key exchange to 512-bit 
        export-grade cryptography. This vulnerability is known as 'Logjam'.
	    AIX OpenSSL had the Logjam mitigation for TLS clients by rejecting 
	    handshakes with DH parameters shorter than 768 bits. This limit has 
        now been increased to 1024 bits.
 
Affected Platforms: 
AIX 5.3, 6.1, 7.1, 7.2 are affected.
 
Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results. APAR versions: IV81287m9b,IV81287m9a,IV81287m9c",Exploitation could allow an attacker to conduct man-in-the-middle attacks.
CVE-2015-7575,App2,$1500000,3,5.9,0.85,1,0.8,4.0120000000000005,12.036000000000001,IBM,AIX 6.1,"IBM AIX OpenSSL MD5 ""SLOTH"" Vulnerability","The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory (http://aix.software.ibm.com/aix/efixes/security/openssl_advisory16.asc) to obtain more information
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  IBM AIX OpenSSL MD5 ""SLOTH"" Vulnerability: AIX 5.3, 6.1, 7.1, 7.2 (https://www14.software.ibm.com/webapp/iwm/web/preLogin.do?source=aixbp)","AIX is prone to the following vulnerabilities: The TLS protocol could allow weaker than expected security 
        caused by a collision attack when using the MD5 hash function for 
        signing a ServerKeyExchange message during a TLS handshake.  Affected Platforms: AIX 5.3, 6.1, 7.1 and 7.2 are affected

Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.",An attacker could exploit this vulnerability using man-in-the-middle techniques to impersonate a TLS server and obtain credentials.
"CVE-2015-7575,CVE-2016-0266",App2,$1500000,3,5.9,0.85,1,0.8,4.0120000000000005,12.036000000000001,IBM,AIX 6.1,IBM AIX Sendmail MD5 and TLS Vulnerability,"The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory (http://aix.software.ibm.com/aix/efixes/security/nettcp_advisory2.asc) to obtain more information
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  nettcp_advisory2: AIX 5.3, 6.1, 7.1, 7.2 (ftp://aix.software.ibm.com/aix/efixes/security/nettcp_fix2.tar)","AIX is prone to the following vulnerabilities: 
The TLS protocol could allow weaker than expected security caused by a collision attack when using the MD5 hash function for signing a ServerKeyExchange message during a TLS handshake. (CVE-2015-7575)
 
IBM AIX does not require the newest version of TLS by default which could allow a remote attacker to obtain sensitive information using man in the middle techniques. (CVE-2016-0266)
 
Affected Platforms: AIX
 Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.  APAR versions: IV86120m9a,IV86116m5b,IV86116m6a,IV86116m7a,IV86117m5a,IV86117m6a,IV86117m7a,IV86118m2a",An attacker could exploit this vulnerability using man-in-the-middle techniques to impersonate a TLS server and obtain credentials.
"CVE-2017-3142,CVE-2017-3143",App2,$1500000,3,5.9,0.85,1,0.8,4.0120000000000005,12.036000000000001,IBM,AIX 6.1,IBM AIX BIND Security Bypass Vulnerability (bind_advisory16),"The vendor has released fixes to resolve this vulnerability. Refer to AIX bind_advisory16 (https://aix.software.ibm.com/aix/efixes/security/bind_advisory16.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  bind_advisory16 (https://aix.software.ibm.com/aix/efixes/security/bind_advisory16.asc)","ISC BIND could allow a remote attacker to bypass security 
        restrictions, caused by an error when an attacker can send and receive 
        messages to an authoritative DNS server and has knowledge of a valid 
        TSIG key name.  
Affected Versions:  
AIX 5.3,6.1, 7.1,7.2
 
APAR versions: 
IV98826m9a,  IV98828m4a, IV98828m5b, IV98829m0a, IV98829m0b, IV98830m1a, IV98830m1b, IV98825m9a 
 
Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.","By sending a specially crafted request packet, an 
        attacker could exploit this vulnerability to bypass TSIG authentication
        on AXFR requests and transfer the target zone."
CVE-2017-3737,App10,$45000,3,5.9,0.85,1,0.8,4.0120000000000005,12.036000000000001,IBM,AIX 6.1,IBM Advanced Interactive eXecutive (AIX) Open Secure Sockets Layer (OpenSSL) Security Bypass Vulnerability (openssl_advisory25),"The vendor has released fixes to resolve this vulnerability. Refer to AIX openssl_advisory25 (http://aix.software.ibm.com/aix/efixes/security/openssl_advisory25.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  openssl_advisory25 (https://aix.software.ibm.com/aix/efixes/security/openssl_fix25.tar)","OpenSSL is prone to a security-bypass vulnerability. 
 OpenSSL could allow a remote attacker to bypass security restrictions, caused by a flaw in the ""error state"" mechanism when directly calling SSL_read() or SSL_write() for an SSL object after receiving a fatal error. An attacker could exploit this vulnerability       to bypass the decryption or encryption process and perform unauthorized actions. (CVE-2017-3737)

Affected Versions:  
AIX 5.3,6.1, 7.1, 7.2 
 
Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.

QID Detection Logic (Authenticated): 
The detection checks for installed packages version via command : - ""lslpp -L"".  
It also checks for interim fixes installed using the command ""emgr -c"". 
The detection posts vulnerable if installed package version is less than patched version and interim fixes are also not installed.",Successfully exploiting this issue will allow attackers to bypass security restrictions and perform unauthorized actions; this may aid in launching further attacks.
"CVE-2018-0734,CVE-2018-5407",App10,$45000,3,5.9,0.85,1,0.8,4.0120000000000005,12.036000000000001,IBM,AIX 6.1,IBM Advanced Interactive eXecutive (AIX) Open Secure Sockets Layer (OpenSSL) Multiple Security Vulnerabilities (openssl_advisory29),"The vendor has released fixes to resolve this vulnerability. Refer to AIX openssl_advisory29 (http://aix.software.ibm.com/aix/efixes/security/openssl_advisory29.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  openssl_advisory29 (https://aix.software.ibm.com/aix/efixes/security/openssl_advisory29.asc)","Multiple Security vulnerabilities are detected in OpenSSL.
CVE-2018-0734: OpenSSL could allow a remote attacker to obtain sensitive information, caused by a timing side channel attack in the DSA signature algorithm.

CVE-2018-5407(PortSmash): Multiple SMT/Hyper-Threading architectures and processors could allow a local attacker to obtain sensitive information, caused by execution engine sharing on Simultaneous Multithreading (SMT) architecture.

Affected Platforms: 
AIX 5.3
AIX 6.1
AIX 7.1
AIX 7.2

Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.

QID Detection Logic (Authenticated): 
The detection checks for installed packages version via command : - ""lslpp -L"".  
It also checks for interim fixes installed using the command ""emgr -c"" or ""instfix -k"". 
The detection posts vulnerable if installed package version is less than patched version and interim fixes are also not installed.","An attacker could exploit this vulnerability using variations in the signing algorithm to recover the private key. 
An attacker could run a malicious process next to legitimate processes using the architectures parallel thread running capabilities to leak encrypted data from the CPU's internal processes."
CVE-2018-0737,App10,$45000,3,5.9,0.85,1,0.8,4.0120000000000005,12.036000000000001,IBM,AIX 6.1,IBM Advanced Interactive eXecutive (AIX) Open Secure Sockets Layer (OpenSSL) Side Channel Attack Information Disclosure Vulnerability (openssl_advisory27),"The vendor has released fixes to resolve this vulnerability. Refer to AIX openssl_advisory27 (http://aix.software.ibm.com/aix/efixes/security/openssl_advisory27.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  openssl_advisory27 (https://www14.software.ibm.com/webapp/iwm/web/preLogin.do?source=aixbp)","The OpenSSL RSA Key generation algorithm is vulnerable to a cache timing side channel attack.  
A local user that can conduct a cache timing side channel attack against the RSA key generation algorithm's BN_mod_inverse() and BN_mod_exp_mont() functions may be able to recover the private key. Affected Platforms: AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2 Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.
 
QID Detection Logic (Authenticated): 
The detection checks for installed packages version via command : - ""lslpp -L"".  
It also checks for interim fixes installed using the command ""emgr -c"" or ""instfix -k"". 
The detection posts vulnerable if installed package version is less than patched version and interim fixes are also not installed.",An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could recover the private key.
"CVE-2022-21349,CVE-2022-21291,CVE-2022-21305,CVE-2022-21360,CVE-2022-21365,CVE-2022-21282,CVE-2022-21296,CVE-2022-21299,CVE-2022-21271,CVE-2022-21283,CVE-2022-21293,CVE-2022-21294,CVE-2022-21340,CVE-2022-21341,CVE-2022-21248,CVE-2022-21393,CVE-2022-21247,CVE-2021-45105",App10,$45000,3,5.9,0.85,1,0.8,4.0120000000000005,12.036000000000001,Oracle,AIX 6.1,Oracle Database 12.2.0.1 Critical Patch Update - January 2022 (Unauthenticated),"Customers are requested to refer to CPUJan2022 (https://support.oracle.com/rs?type=doc&id=2796575.1) to obtain details about how to deploy the update. 
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  CPUJAN2022 (https://support.oracle.com/rs?type=doc&id=2817011.1)","Oracle Database quarterly patches are proactive cumulative patches containing recommended bug fixes that are released on a regular schedule. 
Affected Software: 
Oracle Database 12.2.0.1 
QID Detection Logic (Unauthenticated): 
This QID connects the remote server's Oracle listener and reviews the Oracle banner version.",Successful exploitation could allow an attacker to compromise the database.
"CVE-2022-21349,CVE-2022-21291,CVE-2022-21305,CVE-2022-21360,CVE-2022-21365,CVE-2022-21282,CVE-2022-21296,CVE-2022-21299,CVE-2022-21271,CVE-2022-21283,CVE-2022-21293,CVE-2022-21294,CVE-2022-21340,CVE-2022-21341,CVE-2022-21248,CVE-2022-21393,CVE-2022-21247,CVE-2021-45105",App2,$1500000,3,5.9,0.85,1,0.8,4.0120000000000005,12.036000000000001,Oracle,AIX 6.1,Oracle Database 12.2.0.1 Critical Patch Update - January 2022 (Unauthenticated),"Customers are requested to refer to CPUJan2022 (https://support.oracle.com/rs?type=doc&id=2796575.1) to obtain details about how to deploy the update. 
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  CPUJAN2022 (https://support.oracle.com/rs?type=doc&id=2817011.1)","Oracle Database quarterly patches are proactive cumulative patches containing recommended bug fixes that are released on a regular schedule. 
Affected Software: 
Oracle Database 12.2.0.1 
QID Detection Logic (Unauthenticated): 
This QID connects the remote server's Oracle listener and reviews the Oracle banner version.",Successful exploitation could allow an attacker to compromise the database.
"CVE-2022-21349,CVE-2022-21291,CVE-2022-21305,CVE-2022-21360,CVE-2022-21365,CVE-2022-21282,CVE-2022-21296,CVE-2022-21299,CVE-2022-21271,CVE-2022-21283,CVE-2022-21293,CVE-2022-21294,CVE-2022-21340,CVE-2022-21341,CVE-2022-21248,CVE-2022-21393,CVE-2022-21247,CVE-2021-45105",App3,$900000,3,5.9,0.85,1,0.8,4.0120000000000005,12.036000000000001,Oracle,AIX 6.1,Oracle Database 12.2.0.1 Critical Patch Update - January 2022 (Unauthenticated),"Customers are requested to refer to CPUJan2022 (https://support.oracle.com/rs?type=doc&id=2796575.1) to obtain details about how to deploy the update. 
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  CPUJAN2022 (https://support.oracle.com/rs?type=doc&id=2817011.1)","Oracle Database quarterly patches are proactive cumulative patches containing recommended bug fixes that are released on a regular schedule. 
Affected Software: 
Oracle Database 12.2.0.1 
QID Detection Logic (Unauthenticated): 
This QID connects the remote server's Oracle listener and reviews the Oracle banner version.",Successful exploitation could allow an attacker to compromise the database.
"CVE-2017-6451,CVE-2017-6458,CVE-2017-6462,CVE-2017-6464",App10,$30000,2,8.8,0.85,1,0.8,5.984000000000001,11.968000000000002,IBM,AIX 6.1,IBM AIX NTP Multiple Vulnerabilities (ntp_advisory9.asc),"The vendor has released fixes to resolve this vulnerability. Refer to AIX NTP Advisory (http://aix.software.ibm.com/aix/efixes/security/ntp_advisory9.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  ntp_advisory9: AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2 (https://aix.software.ibm.com/aix/efixes/security/ntp_fix9.tar)","There are multiple vulnerabilities in NTPv3 and NTPv4 that impact AIX.   
Affected Platforms: 
AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2

APAR versions: 
IV96305, IV96306, IV96307, IV96308, IV96309, IV96310, IV96311, IV96312

Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.","By sending an overly long string argument, a remote authenticated attacker could exploit this vulnerability to overflow a buffer and cause the application to crash."
"CVE-2016-1286,CVE-2016-1285",App10,$30000,2,8.6,0.85,1,0.8,5.848,11.696,IBM,AIX 6.1,IBM AIX BIND Denial of Service Vulnerability,"The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory (http://aix.software.ibm.com/aix/efixes/security/bind_advisory12.asc) to obtain more information
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  IBM AIX BIND Denial of Service Vulnerability: AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2 (ftp://aix.software.ibm.com/aix/efixes/security/bind_fix12.tar)","AIX is prone to the following vulnerabilities:

ISC BIND is vulnerable to a denial of service, caused by the improper handling of control channel input. By sending a specially crafted packet, a remote attacker could exploit this vulnerability to trigger an assertion failure in sexpr.c or alist.c and cause the named process to crash. 
 ISC BIND is vulnerable to a denial of service, caused by an error when parsing signature records for DNAME resource records. A remote attacker could exploit this vulnerability to trigger an assertion failure in resolver.c or db.c and cause the named process to crash.
 Affected Platforms: AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2
 Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.  APAR versions: IV85298m9a,IV84456s5b,IV84984m5a,IV84456s6a,IV84984m6a,IV84456s7a,IV84984s7a,IV84457s6a,IV85296m6a,IV84458s1a,IV84947m1a,IV84458s2a,IV85296s2a,IV84457s5a,IV85296m5a,IV84459s1a,IV85297m1a,IV84459s2a,IV85297s2a",Exploitation could result in a denial of service condition.
"CVE-2018-1517,CVE-2018-1656,CVE-2018-2973,CVE-2018-2952,CVE-2018-2940,CVE-2018-2964,CVE-2018-12539",App3,$600000,2,8.3,0.85,1,0.8,5.644000000000001,11.288000000000002,IBM,AIX 6.1,IBM AIX Java Multiple Vulnerabilities(java_july2018_advisory),"The vendor has released fixes to resolve this vulnerability. Refer to AIX java_july2018_advisory (http://aix.software.ibm.com/aix/efixes/security/java_july2018_advisory.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  java_july2018_advisory (http://aix.software.ibm.com/aix/efixes/security/java_july2018_advisory.asc)","There are multiple vulnerabilities in IBM SDK Java Technology Edition,Versions 7, 7.1, 8 that are used by AIX. These issues were disclosed as part of the IBM Java SDK updates in July 2018.

Affected Versions: 
AIX 5.3, 6.1, 7.1, 7.2

QID Detection Logic (Authenticated): 
The detection checks for installed packages version via command: - ""lslpp -L"".","Successful exploitation allows remote attackers to affect confidentiality, integrity, and availability impact."
"CVE-2018-2579,CVE-2018-2588,CVE-2018-2663,CVE-2018-2677,CVE-2018-2678,CVE-2018-2602,CVE-2018-2599,CVE-2018-2603,CVE-2018-2657,CVE-2018-2618,CVE-2018-2641,CVE-2018-2582,CVE-2018-2634,CVE-2018-2637,CVE-2018-2633,CVE-2018-2638,CVE-2018-2639,CVE-2018-1417",App3,$600000,2,8.3,0.85,1,0.8,5.644000000000001,11.288000000000002,IBM,AIX 6.1,IBM AIX Java Multiple Vulnerabilities(java_jan2018_advisory),"The vendor has released fixes to resolve this vulnerability. Refer to AIX java_jan2018_advisory (http://aix.software.ibm.com/aix/efixes/security/java_jan2018_advisory.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  java_jan2018_advisory (http://aix.software.ibm.com/aix/efixes/security/java_jan2018_advisory.asc)","There are multiple vulnerabilities in IBM SDK Java Technology Edition,Versions 7, 7.1, 8 that are used by AIX. These issues were disclosed as part of the IBM Java SDK updates in January 2018.

Affected Versions: 
AIX 5.3, 6.1, 7.1, 7.2

QID Detection Logic (Authenticated): 
The detection checks for installed packages version via command: - ""lslpp -L"".","Successful exploitation allows remote attackers to affect confidentiality, integrity, and availability impact."
"CVE-2020-14621,CVE-2020-14593,CVE-2020-14583,CVE-2020-14579,CVE-2020-14578,CVE-2020-14577,CVE-2020-14556,CVE-2020-17639,CVE-2020-2601,CVE-2020-2590,CVE-2020-14581,CVE-2019-17639",App3,$600000,2,8.3,0.85,1,0.8,5.644000000000001,11.288000000000002,IBM,AIX 6.1,"IBM Java SDK Multiple Vulnerabilities(Oracle July 14 2020 CPU (1.7.0_271, 1.8.0_261))","Latest service refresh packs are available at  IBM SDK, Java Technology Edition Download (https://developer.ibm.com/javasdk/downloads/).  
Refer to Oracle July 14 2020 CPU  (https://www.ibm.com/support/pages/node/6256562) 
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  IBM Java SDK(Oracle July 14 2020 CPU (1.7.0_271, 1.8.0_261)) (https://developer.ibm.com/javasdk/support/security-vulnerabilities/#Oracle_April_18_2017_CPU)","IBM Java SDK are prone to multiple vulnerabilities. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data.

Affected Versions: 
Prior to 7.0.10.70 
Prior to 7.1.4.70 
Prior to  8.0.6.15

QID Detection Logic (Authenticated): 
The QID  runs java -version; command to check if vulnerable IBM Java is installed on the system.","Successful exploitation could allow attacker to gain unauthorized update, insert or delete access."
CVE-2018-1655,App3,$900000,3,5.5,0.85,1,0.8,3.74,11.22,IBM,AIX 6.1,IBM AIX rmsock Information Disclosure Vulnerability (rmsock_advisory2),"The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory (http://aix.software.ibm.com/aix/efixes/security/rmsock_advisory2.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  rmsock_advisory2 (http://aix.software.ibm.com/aix/efixes/security/rmsock_advisory2.asc.sig)","IBM AIX contains a vulnerability in the rmsock command that may be used to expose kernel memory..   Affected Platforms: AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2 Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results. 
APAR versions: IJ06905, IJ06906, IJ06904, IJ06934, IJ06907, IJ06908  
 
QID Detection Logic (Authenticated): 
The detection checks for installed packages version via command : - ""lslpp -L"".  
It also checks for interim fixes installed using the command ""emgr -c"" or ""instfix -k"". 
The detection posts vulnerable if installed package version is less than patched version and interim fixes are also not installed.",A local user can exploit an unspecified flaw in the 'rmsock' command to obtain potentially sensitive information from kernel memory on the target system.
CVE-2018-3639,App3,$900000,3,5.5,0.85,1,0.8,3.74,11.22,IBM,AIX 6.1,IBM AIX Speculative Store Bypass (SSB) or Variant 4 Vulnerability (variant4_advisory),"The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory (http://aix.software.ibm.com/aix/efixes/security/variant4_advisory.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  variant4_advisory (https://aix.software.ibm.com/aix/efixes/security/variant4_advisory.asc.sig)","IBM has released AIX Fixes in response to Speculative Store Bypass (SSB), also known as Variant 4.   Affected Platforms: AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2 Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results. 
APAR versions: IJ05826, IJ05824, IJ05823, IJ05822, IJ05821, IJ05820, IJ05818   
 
QID Detection Logic (Authenticated): 
The detection checks for installed packages version via command : - ""lslpp -L"".  
It also checks for interim fixes installed using the command ""emgr -c"" or ""instfix -k"". 
The detection posts vulnerable if installed package version is less than patched version and interim fixes are also not installed.",An attacker may exploit this issue to perform unauthorized actions in the context of the application.
"CVE-2015-6563,CVE-2016-0777,CVE-2016-0778,CVE-2015-6564",App10,$30000,2,8.1,0.85,1,0.8,5.508,11.016,IBM,AIX 6.1,IBM AIX OpenSSH Multiple Vulnerabilities,"The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory (http://aix.software.ibm.com/aix/efixes/security/openssh_advisory7.asc) to obtain more information
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  IBM AIX OpenSSH Multiple Vulnerabilities: AIX 5.3, 6.1, 7.1, 7.2 (https://www14.software.ibm.com/webapp/iwm/web/preLogin.do?source=aixbp)","AIX is prone to the following vulnerabilities: OpenSSH could allow a remote attacker to obtain sensitive 
        information, caused by a client information leak from using the roaming
        connection feature. By persuading a victim to connect to a malicious 
        server, an attacker could exploit this vulnerability to retrieve 
        private cryptographic keys or other sensitive information.
 
OpenSSH is vulnerable to a heap-based buffer overflow, caused 
        by improper bounds checking by the packet_write_wait() and 
        ssh_packet_write_wait() API functions when two non-default options: a 
        ProxyCommand and either ForwardAgent or ForwardX11are used. By 
        persuading a victim to connect to a malicious server, a remote attacker
        could overflow a buffer and execute arbitrary code on the system or 
        cause the application to crash.
 Affected Platforms: AIX 5.3, 6.1, 7.1 and 7.2 are affected
 Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.  APAR versions: IV80743",Exploitation could allow an attacker to execute arbitrary code or cause a denial of service.
CVE-2004-0230,App2,$4000000,8,2,0.85,1,0.8,1.36,10.879999999999999,Others,AIX 6.1,TCP Sequence Number Approximation Based Denial of Service,"Please first check the results section below for the port number on which this vulnerability was detected. If that port number is known to be used for port-forwarding, then it is the backend host that is really vulnerable.
 
Various implementations and products including Check Point, Cisco, Cray Inc, Hitachi, Internet Initiative Japan, Inc (IIJ), Juniper Networks, NEC, Polycom, and Yamaha are currently undergoing review. Contact the vendors to obtain more information about affected products and fixes. NISCC Advisory 236929 - Vulnerability Issues in TCP (http://packetstormsecurity.org/0404-advisories/246929.html) details the vendor patch status as of the time of the advisory, and identifies resolutions and workarounds.
 
Refer to US-CERT Vulnerability Note VU#415294 (http://www.kb.cert.org/vuls/id/415294) and OSVDB Article 4030 (http://osvdb.org/4030) to obtain a list of vendors affected by this issue and a note on resolutions (if any) provided by the vendor.
 
For Microsoft: Refer to MS05-019 (https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-019) and MS06-064 (https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-064) for further details.
 
For SGI IRIX: Refer to SGI Security Advisory 20040905-01-P (ftp://patches.sgi.com/support/free/security/advisories/20040905-01-P.asc)
 
For SCO UnixWare 7.1.3 and 7.1.1: Refer to SCO Security Advisory SCOSA-2005.14 (ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.14/SCOSA-2005.14.txt)
 
For Solaris (Sun Microsystems): The vendor has acknowledged the vulnerability; however a patch is not available. Refer to Sun Microsystems, Inc. Information for VU#415294 (http://www.kb.cert.org/vuls/id/JARL-5YGQAJ) to obtain additional details. Also, refer to TA04-111A (http://www.us-cert.gov/cas/techalerts/TA04-111A.html) for detailed mitigating strategies against these attacks.
 
For NetBSD: Refer to NetBSD-SA2004-006 (ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-006.txt.asc)
 
For Cisco: Refer to cisco-sa-20040420-tcp-ios.shtml (http://www.cisco.com/warp/public/707/cisco-sa-20040420-tcp-ios.shtml).
 
For IBM : Refer to IBM-tcp-sequence-number-cve-2004-0230 (https://www.ibm.com/support/pages/tcp-sequence-number-approximation-based-denial-service-cve-2004-0230).
 
For Red Hat Linux: There is no fix available.

Workaround: The following BGP-specific workaround information has been provided.
 
For BGP implementations that support it, the TCP MD5 Signature Option should be enabled. Passwords that the MD5 checksum is applied to should be set to strong values and changed on a regular basis.
 
Secure BGP configuration instructions have been provided for Cisco and Juniper at these locations:
 
Secure Cisco IOS BGP Template (http://www.cymru.com/Documents/secure-bgp-template.html)
 
JUNOS Secure BGP Template (http://www.cymru.com/gillsr/documents/junos-bgp-template.pdf)","TCP provides stateful communications between hosts on a network. TCP sessions are established by a three-way handshake and use random 32-bit sequence and acknowledgement numbers to ensure the validity of traffic. A vulnerability was reported that may permit TCP sequence numbers to be more easily approximated by remote attackers. This issue affects products released by multiple vendors.  
 
The cause of the vulnerability is that affected implementations will accept TCP sequence numbers within a certain range, known as the acknowledgement range, of the expected sequence number for a packet in the session. This is determined by the TCP window size, which is negotiated during the three-way handshake for the session. Larger TCP window sizes may be set to allow for more throughput, but the larger the TCP window size, the more probable it is to guess a TCP sequence number that falls within an acceptable range. It was initially thought that guessing an acceptable sequence number was relatively difficult for most implementations given random distribution, making this type of attack impractical. However, some implementations may make it easier to successfully approximate an acceptable TCP sequence number, making these attacks possible with a number of protocols and implementations.
 
This is further compounded by the fact that some implementations may support the use of the TCP Window Scale Option, as described in RFC 1323, to extend the TCP window size to a maximum value of 1 billion.
 
This vulnerability will permit a remote attacker to inject a SYN or RST packet into the session, causing it to be reset and effectively allowing for denial of service attacks. An attacker would exploit this issue by sending a packet to a receiving implementation with an approximated sequence number and a forged source IP address and TCP port.
 
There are a few factors that may present viable target implementations, such as those which depend on long-lived TCP connections, those that have known or easily guessed IP address endpoints and those implementations with easily guessed TCP source ports. It has been noted that Border Gateway Protocol (BGP) is reported to be particularly vulnerable to this type of attack, due to the use of long-lived TCP sessions and the possibility that some implementations may use the TCP Window Scale Option. As a result, this issue is likely to affect a number of routing platforms.
 
Another factor to consider is the relative difficulty of injecting packets into TCP sessions, as a number of receiving implementations will reassemble packets in order, dropping any duplicates. This may make some implementations more resistant to attacks than others.
 
It should be noted that while a number of vendors have confirmed this issue in various products, investigations are ongoing and it is likely that many other vendors and products will turn out to be vulnerable as the issue is investigated further.",Successful exploitation of this issue could lead to denial of service attacks on the TCP based services of target hosts.
CVE-2017-15906,App3,$900000,3,5.3,0.85,1,0.8,3.604,10.812000000000001,IBM,AIX 6.1,IBM AIX OpenSSH Vulnerability (openssh_advisory11),"The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory openssh_advisory11 (http://aix.software.ibm.com/aix/efixes/security/openssh_advisory11.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  AIX Advisory openssh_advisory11: AIX 5.3, 6.1, 7.1 and 7.2 (OpenSSH) (https://www-01.ibm.com/marketing/iwm/iwm/web/reg/download.do?source=aixbp&lang=en_US&S_PKG=openssh&cp=UTF-8)","IBM AIX is prone to the following vulnerability:
 
The process_open function in sftp-server.c in OpenSSH does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files.(CVE-2017-15906)
 
Affected Platforms: 
AIX 5.3, 6.1, 7.1 and 7.2

QID Detection Logic(Authenticated)  
It checks for vulnerable versions of OpenSSH in IBM AIX.",Successful exploitation allows attackers to create zero-length files.
CVE-2017-3735,App10,$45000,3,5.3,0.85,1,0.8,3.604,10.812000000000001,IBM,AIX 6.1,IBM AIX OpenSSL Security Bypass Vulnerability (openssl_advisory24),"The vendor has released fixes to resolve this vulnerability. Refer to AIX openssl_advisory24 (http://aix.software.ibm.com/aix/efixes/security/openssl_advisory24.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  openssl_advisory24 (https://www14.software.ibm.com/webapp/iwm/web/reg/download.do?source=aixbp&lang=en_US&S_PKG=openssl&cp=UTF-8)","OpenSSL is prone to a security-bypass vulnerability. 
 If an X.509 certificate has a malformed IPAddressFamily extension, OpenSSL could do a one-byte buffer overread. The most likely result could be an erroneous display of the certificate in text format.

Affected Versions:  
AIX 5.3,6.1, 7.1, 7.2 
 
Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.
 
QID Detection Logic (Authenticated): 
The detection checks for installed packages version via command : - ""lslpp -L"".  
It also checks for interim fixes installed using the command ""emgr -c"". 
The detection posts vulnerable if installed package version is less than patched version and interim fixes are also not installed.",Successfully exploiting this issue will allow attackers to bypass security restrictions and perform unauthorized actions; this may aid in launching further attacks.
CVE-2018-15473,App3,$900000,3,5.3,0.85,1,0.8,3.604,10.812000000000001,IBM,AIX 6.1,IBM AIX OpenSSH Vulnerability (openssh_advisory12),"The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory openssh_advisory11 (http://aix.software.ibm.com/aix/efixes/security/openssh_advisory12.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  openssh_advisory12 (http://aix.software.ibm.com/aix/efixes/security/openssh_advisory12.asc)","Vulnerability in OpenSSH affects AIX.
OpenSSH is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed. 
OpenSSH could allow a remote attacker to obtain sensitive information, caused by different responses to valid and invalid authentication attempts. By sending a specially crafted request, an attacker could exploit this vulnerability to enumerate valid usernames.

Affected Platforms: 
AIX 5.3, 6.1, 7.1 and 7.2

QID Detection Logic(Authenticated)  
It checks for vulnerable versions of OpenSSH in IBM AIX.","By sending a specially crafted request, an attacker could exploit this vulnerability to enumerate valid usernames."
CVE-2018-6922,App3,$900000,3,5.3,0.85,1,0.8,3.604,10.812000000000001,IBM,AIX 6.1,IBM AIX FreeBSD Denial of Service Vulnerability(freebsd_advisory),"The vendor has released fixes to resolve this vulnerability. Refer to AIX freebsd_advisory (http://aix.software.ibm.com/aix/efixes/security/freebsd_advisory.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  freebsd_advisory (http://aix.software.ibm.com/aix/efixes/security/freebsd_advisory.asc)"," FreeBSD is vulnerable to a denial of service, caused by the use of an inefficient TCP reassembly algorithm. By sending specially-crafted TCP traffic, a remote attacker could exploit this vulnerability to consume all available CPU resources.

Affected Versions: 
AIX 5.3, 6.1, 7.1, 7.2

Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.

QID Detection Logic (Authenticated): 
The detection checks for installed packages version via command : - ""lslpp -L"". 
It also checks for interim fixes installed using the command ""emgr -c"" or ""instfix -k"".
The detection posts vulnerable if installed package version is less than patched version and interim fixes are also not installed.",A remote attacker could exploit this vulnerability to consume all available CPU resources.
"CVE-2022-21393,CVE-2022-21349,CVE-2022-21291,CVE-2022-21305,CVE-2022-21360,CVE-2022-21365,CVE-2022-21282,CVE-2022-21296,CVE-2022-21299,CVE-2022-21271,CVE-2022-21293,CVE-2022-21294,CVE-2022-21340,CVE-2022-21341,CVE-2022-21248",App3,$900000,3,5.3,0.85,1,0.8,3.604,10.812000000000001,Oracle,AIX 6.1,Oracle Database 12.1.0.2 Critical Patch Update - January 2022 (Unauthenticated),"Customers are requested to refer to CPUJan2022 (https://support.oracle.com/rs?type=doc&id=2796575.1) to obtain details about how to deploy the update. 
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  CPUJAN2022 (https://support.oracle.com/rs?type=doc&id=2817011.1)","Oracle Database quarterly patches are proactive cumulative patches containing recommended bug fixes that are released on a regular schedule. 
Affected Software: 
Oracle Database 12.1.0.2 
QID Detection Logic (Unauthenticated): 
This QID connects the remote server's Oracle listener and reviews the Oracle banner version.",Successful exploitation could allow an attacker to compromise the database.
"CVE-2015-8325,CVE-2016-6210,CVE-2016-6515",App10,$30000,2,7.8,0.85,1,0.8,5.304,10.608,IBM,AIX 6.1,IBM AIX OpenSSH Multiple Vulnerabilities (openssh_advisory9),"The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory openssh_advisory9 (http://aix.software.ibm.com/aix/efixes/security/openssh_advisory9.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  openssh_advisory9: AIX 5.3, 6.1, 7.1, 7.2 (http://aix.software.ibm.com/aix/efixes/security/openssh_fix9.tar)","IBM AIX is prone to the following vulnerabilities:
 
When the UseLogin feature is enabled and PAM is configured to 
        read .pam_environment files in user home directories, allows local users 
        to gain privileges by triggering a crafted environment for the /bin/login 
        program, as demonstrated by an LD_PRELOAD environment variable.
 
An attacker can measure timing differences in password 
    authentication that could be used to discern valid from invalid account 
    names when long passwords were sent and particular password hashing
       algorithms are in use on the server 
 
sshd does not limit password lengths for password authentication, 
        which allows remote attackers to cause a denial of service 
        (crypt CPU consumption) via a long string.  
 
Affected Platforms: 
AIX 5.3, 6.1, 7.1 and 7.2
 
Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.",Exploitation could allow a remote attacker to execute arbitrary code.
CVE-2016-6079,App10,$30000,2,7.8,0.85,1,0.8,5.304,10.608,IBM,AIX 6.1,IBM AIX lquerylv Privilege Escalation Vulnerability (lquerylv_advisory.asc),"The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory lquerylv_advisory.asc (http://aix.software.ibm.com/aix/efixes/security/lquerylv_advisory.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  lquerylv_advisory.asc: AIX 5.3, 6.1, 7.1 and 7.2 (http://aix.software.ibm.com/aix/efixes/security/lquerylv_fix.tar)","AIX contains an unspecified vulnerability in lquerylv in LVM that impacts AIX.   
Affected Versions:-  
AIX 5.3, 6.1, 7.1, 7.2  
 
Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results. 
 
APAR versions: 
IV88658s9a, IV88658, IV87981s7a,IV87981s7a,IV87981s7a, IV87981, IV88419s7a,IV88419s7a,IV88419s7a,IV87640s2a,IV87640s2a,IV87640s2a, IV88419,IV87640, IV88053s2a,IV88053s2a,IV88053s2a,IV88053",The vulnerability could allow a locally authenticated user to obtain root level privileges.
"CVE-2016-8858,CVE-2016-10009,CVE-2016-10011,CVE-2016-10012",App10,$30000,2,7.8,0.85,1,0.8,5.304,10.608,IBM,AIX 6.1,IBM AIX OpenSSH Multiple Vulnerabilities (openssh_advisory10),"The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory openssh_advisory10 (http://aix.software.ibm.com/aix/efixes/security/openssh_advisory10.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  AIX Advisory openssh_advisory10: AIX 5.3, 6.1, 7.1 and 7.2 (OpenSSH) (https://www14.software.ibm.com/webapp/iwm/web/reg/download.do?source=aixbp&lang=en_US&S_PKG=openssh&cp=UTF-8)","IBM AIX is prone to the following vulnerabilities:
 
OpenSSH is vulnerable to a denial of service, caused by an
    error in the kex_input_kexinit() function. By sending specially crafted data
    during the key exchange process, a remote attacker could exploit this
    vulnerability to consume all available memory resources. (CVE-2016-8858)
 
OpenSSH could allow a remote authenticated attacker to execute
     arbitrary code on the system, caused by the loading of a specially crafted
     PKCS#11 module across a forwarded agent channel. An attacker could exploit 
     this vulnerability to write files or execute arbitrary code on the system. (CVE-2016-10009)
 
OpenSSH could allow a local authenticated attacker to obtain
    sensitive information, caused by a privilege separation flaw. An attacker 
    could exploit this vulnerability to obtain host private key material and 
    other sensitive information. (CVE-2016-10011)
 
OpenSSH could allow a local attacker to gain elevated privileges
    on the system, caused by improper bounds checking in the shared memory
    manager. An attacker could exploit this vulnerability to gain elevated 
    privileges on the system. (CVE-2016-10012)
 
Affected Platforms: 
AIX 5.3, 6.1, 7.1 and 7.2
 
Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results. 
APAR versions:
6203_ifix.",Successful exploitation could result in Denial of Service Vulnerability.
CVE-2016-8972,App10,$30000,2,7.8,0.85,1,0.8,5.304,10.608,IBM,AIX 6.1,IBM AIX bellmail Privilege Escalation Vulnerability (bellmail_advisory),"The vendor has released fixes to resolve this vulnerability. Refer to AIX bellmail_advisory (https://aix.software.ibm.com/aix/efixes/security/bellmail_advisory.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  AIX bellmail_advisory: AIX 6.1, 7.1, 7.2 (http://aix.software.ibm.com/aix/efixes/security/bellmail_fix.tar)","IBM AIX is prone to a privilege escalation vulnerability.  
IBM AIX could allow a local user to gain root privileges using a specially crafted command within the bellmail client.
  Affected Versions:-  
AIX 6.1, 7.1, 7.2 
 
Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.
 
APAR versions: 
IV91006s8a, IV91006, IV91007s7a, IV91008s3a, IV91007, IV91008, IV91010s2a, IV91011s1a, IV91010, IV91011",IBM AIX could allow a local user to gain root privileges using a specially crafted command within the bellmail client.
CVE-2017-1093,App10,$30000,2,7.8,0.85,1,0.8,5.304,10.608,IBM,AIX 6.1,IBM AIX bellmail Privilege Escalation Vulnerability (bellmail_advisory2),"The vendor has released fixes to resolve this vulnerability. Refer to AIX bellmail_advisory2 (http://aix.software.ibm.com/aix/efixes/security/bellmail_advisory2.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  AIX bellmail_advisory2: AIX 6.1, 7.1, 7.2 (https://aix.software.ibm.com/aix/efixes/security/bellmail_advisory2.asc.sig)","IBM AIX is prone to a privilege escalation vulnerability.  
IBM AIX could allow a local user to gain root privileges using a specially crafted command within the bellmail client.
  Affected Versions:-  
AIX 6.1, 7.1, 7.2 
 
Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.
 
APAR versions: 
IV92238m8a,IV92238m8a,IV92238m8a,IV92250m71,IV92250m71,IV92250m71,IV92240m3a,IV92240m3a,IV92240m3a,IV92241m2a,IV92241m2a,IV92241m2a,IV92242m1a,IV92242m1a,IV92241,IV92242, IV92250,IV92240,IV92238",IBM AIX could allow a local user to exploit a vulnerability in the bellmail binary to gain root privileges.
CVE-2017-1692,App10,$30000,2,7.8,0.85,1,0.8,5.304,10.608,IBM,AIX 6.1,"IBM AIX ""suid"" Privilege Escalation Vulnerability (suid_advisory)","The vendor has released fixes to resolve this vulnerability. Refer to AIX suid_advisory (http://aix.software.ibm.com/aix/efixes/security/suid_advisory.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  suid_advisory (https://aix.software.ibm.com/aix/efixes/security/suid_advisory.asc)","IBM AIX contains an unspecified vulnerability that would allow a locally authenticated user to obtain root level privileges. (CVE-2017-1692)  
A local user can exploit an unspecified flaw in bellmail, caccelstat, iostat, lquerypv, restbyinode, and vmstat to obtain root level privileges on the target system.
  Affected Versions:  
AIX 5.3,6.1, 7.1, 7.2 
 
Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.

QID Detection Logic (Authenticated): 
The detection checks for installed packages version via command : - ""lslpp -L"".  
It also checks for interim fixes installed using the command ""emgr -c"". 
The detection posts vulnerable if installed package version is less than patched version and interim fixes are also not installed.",A local user can obtain root privileges on the target system.
"CVE-2015-7974,CVE-2016-1550,CVE-2016-1551,CVE-2016-2517,CVE-2016-2518,CVE-2016-2519,CVE-2016-1547,CVE-2016-4957,CVE-2016-4953,CVE-2016-4954,CVE-2016-4955",App10,$30000,2,7.7,0.85,1,0.8,5.236000000000001,10.472000000000001,IBM,AIX 6.1,IBM AIX NTP Multiple Vulnerabilities (ntp_advisory7.asc),"The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory (http://aix.software.ibm.com/aix/efixes/security/ntp_advisory7.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  ntp_advisory7.asc: AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2 (ftp://aix.software.ibm.com/aix/efixes/security/ntp_fix7.tar)","There are multiple vulnerabilities in NTPv3 and NTPv4 that impact AIX.   
Affected Platforms: 
AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2

APAR versions: 
IV87614, IV87419, IV87615, IV87420, IV87939, IV87278, IV87279

Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.","The most severe of the vulnerabilities could allow denial of service. By sending spoofed CRYPTO_NAK or a bad MAC packets with correct origin timestamps, a remote attacker could exploit this vulnerability to cause the autokey association to reset."
"CVE-2018-2800,CVE-2018-2795,CVE-2018-2796,CVE-2018-2797,CVE-2018-2798,CVE-2018-2799,CVE-2018-2783,CVE-2018-2794,CVE-2018-2790",App3,$600000,2,7.7,0.85,1,0.8,5.236000000000001,10.472000000000001,IBM,AIX 6.1,IBM AIX Java Multiple Vulnerabilities(java_apr2018_advisory),"The vendor has released fixes to resolve this vulnerability. Refer to AIX java_apr2018_advisory (http://aix.software.ibm.com/aix/efixes/security/java_apr2018_advisory.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  java_apr2018_advisory (http://aix.software.ibm.com/aix/efixes/security/java_apr2018_advisory.asc)","There are multiple vulnerabilities in IBM SDK Java Technology Edition,Versions 7, 7.1, 8 that are used by AIX. These issues were disclosed as part of the IBM Java SDK updates in April 2018.

Affected Versions: 
AIX 5.3, 6.1, 7.1, 7.2

QID Detection Logic (Authenticated): 
The detection checks for installed packages version via command: - ""lslpp -L"".","Successful exploitation allows remote attackers to affect confidentiality, integrity, and availability impact."
"CVE-2015-3194,CVE-2015-3195,CVE-2015-3196",App10,$30000,2,7.5,0.85,1,0.8,5.1000000000000005,10.200000000000001,IBM,AIX 6.1,IBM AIX OpenSSL Multiple Vulnerabilities,"The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory (http://aix.software.ibm.com/aix/efixes/security/openssl_advisory15.asc) to obtain more information
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  IBM AIX OpenSSL Advisory: AIX 5.3, 6.1, 7.1, 7.2 (https://www14.software.ibm.com/webapp/iwm/web/preLogin.do?source=aixbp)","AIX is prone to the following vulnerabilities: 
- OpenSSL allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an RSA PSS ASN.1 signature that lacks a mask generation function parameter.
 
- The ASN1_TFLG_COMBINE implementation in OpenSSL mishandles 
        errors caused by malformed X509_ATTRIBUTE data, which allows remote 
        attackers to obtain sensitive information from process memory by 
        triggering a decoding failure in a PKCS#7 or CMS application.
 
- OpenSSL when used for a multi-threaded client, writes the 
        PSK identity hint to an incorrect data structure, which allows remote
        servers to cause a denial of service (race condition and double free)
        via a crafted ServerKeyExchange message.

Affected Platforms: AIX 5.3, 6.1, 7.1, 7.2 are affected
 Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.",Exploitation could allow an attacker to cause a denial of service or remotely execute code.
"CVE-2015-7973,CVE-2015-7977,CVE-2015-7979,CVE-2015-8139,CVE-2015-8140,CVE-2015-8158",App10,$30000,2,7.5,0.85,1,0.8,5.1000000000000005,10.200000000000001,IBM,AIX 6.1,IBM AIX NTP Multiple Vulnerabilities,"The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory (http://aix.software.ibm.com/aix/efixes/security/ntp_advisory6.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  IBM AIX NTP Multiple Vulnerabilities: AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2 (ftp://aix.software.ibm.com/aix/efixes/security/ntp_fix6.tar)","AIX is prone to the following vulnerabilities:  
 NTP could allow a remote attacker to launch a replay attack. An attacker could exploit this vulnerability using authenticated broadcast mode packets to conduct a replay attack and gain unauthorized access to the system. 
 NTP is vulnerable to a denial of service, caused by a NULL pointer dereference. By sending a specially crafted ntpdc reslist command, an attacker could exploit this vulnerability to cause a segmentation fault.  NTP could allow a remote attacker to bypass security restrictions. By sending specially crafted broadcast packets with bad authentication, an attacker could exploit this vulnerability to cause the target broadcast client to tear down the association with the broadcast server. 
 NTP could allow a remote attacker to obtain sensitive information, caused by an origin leak in ntpq and ntpdc. An attacker could exploit this vulnerability to obtain sensitive information 
 NTP could allow a remote attacker to launch a replay attack. An attacker could exploit this vulnerability using ntpq to conduct a replay attack and gain unauthorized access to the system information. 
 NTP is vulnerable to a denial of service, caused by the improper processing of incoming packets by ntpq. By sending specially crafted data, an attacker could exploit this vulnerability to cause the application to enter into an infinite loop. 
 
 Affected Platforms: 
AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2
 Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results. APAR versions: IV84269m9a,IV83984m4a,IV83984m5a,IV83984m6a,IV83992s5a,IV83984s7,IV83993m4b,IV83993m5a,IV83993m6a,IV83994m1a,IV83983s5a,IV83994s2,IV83995m0a,IV83995m1a,IV83983s5a",Exploitation could allow an attacker to launch a replay attack or cause a denial of service.
"CVE-2016-2775,CVE-2016-2776",App10,$30000,2,7.5,0.85,1,0.8,5.1000000000000005,10.200000000000001,IBM,AIX 6.1,IBM AIX BIND Denial of Service Vulnerability (bind_advisory13),"The vendor has released fixes to resolve this vulnerability. Refer to AIX bind_advisory13 (http://aix.software.ibm.com/aix/efixes/security/bind_advisory13.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  bind_advisory13: AIX 5.3, 6.1, 7.1 and 7.2 (Bind) (https://aix.software.ibm.com/aix/efixes/security/bind_fix13.tar)","AIX is prone to the following vulnerabilities: 
 ISC BIND is vulnerable to a denial of service, caused by an assertion failure in buffer.c while a nameserver is building responses to a specifically constructed request.(CVE-2016-2776) 
ISC BIND is vulnerable to a denial of service, caused by an error when lwresd or the named lwres option is enabled.(CVE-2016-2775) 
Affected Platforms:
AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2
 
Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.
 
APAR versions: 
IV90056m9a,IV90056,IV89828m5a,IV89828m6a,IV89828m7a,IV89828,IV89830m5a,IV89830m6d,IV89830m7a,IV89829m1a,IV89829m1a,IV89829m2a,IV89830,IV89829,IV89831m1a,IV89831m1a,IV89831m2a,IV89831",Exploitation could result in a denial of service condition.
CVE-2016-8610,App10,$30000,2,7.5,0.85,1,0.8,5.1000000000000005,10.200000000000001,IBM,AIX 6.1,IBM AIX OpenSSL Denial of Service Vulnerability (openssl_advisory22),"The vendor has released fixes to resolve this vulnerability. Refer to AIX openssl_advisory22 (http://aix.software.ibm.com/aix/efixes/security/openssl_advisory22.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  AIX openssl_advisory22: AIX 5.3, 6.1, 7.1 and 7.2 (OpenSSL) (https://aix.software.ibm.com/aix/efixes/security/openssl_fix22.tar)","IBM AIX SSL/TLS protocol is prone to a denial of service vulnerability. The vulnerability is caused by an error when processing ALERT packets during a SSL handshake.  
Note: This vulnerability is called ""SSL-Death-Alert"".
  Affected Versions:-  
AIX 5.3,6.1, 7.1, 7.2 
 
Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.
 
APAR versions: 
517_ifix, fips_ifix","By sending specially-crafted plain-text ALERT packets, a remote attacker could exploit this vulnerability to cause the application to stop responding."
"CVE-2016-8864,CVE-2016-2848",App10,$30000,2,7.5,0.85,1,0.8,5.1000000000000005,10.200000000000001,IBM,AIX 6.1,IBM AIX BIND Denial of Service Vulnerability (bind_advisory14),"The vendor has released fixes to resolve this vulnerability. Refer to AIX bind_advisory14 (https://aix.software.ibm.com/aix/efixes/security/bind_advisory14.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  AIX bind_advisory14: AIX 6.1, 7.1 (Bind) (http://aix.software.ibm.com/aix/efixes/security/bind_fix14.tar)","There are two vulnerabilities in BIND that impact AIX.  
1. SC BIND is vulnerable to a denial of service, caused by the
    improper handling of responses containing a DNAME answer in db.c or
    resolver.c. By sending a recursive response, a remote attacker could 
    exploit this vulnerability to trigger an assertion failure. (CVE-2016-8864)  
2. ISC BIND is vulnerable to a denial of service. By sending a
    specially crafted DNS packet with malformed options, a remote attacker could 
    exploit this vulnerability to trigger an assertion failure.  (CVE-2016-2848)  
Affected Versions: -  
AIX 6.1, 7.1
 
Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.
 
APAR versions: 
IV91253m9b,IV91253,IV91254m6b,IV91254m7b,IV91254m8b,IV91254,IV91214m4b,IV91214m5b,IV91214m6a,IV91255m1b,IV91255m2a,IV91255m3c,IV91214,IV91255,IV91256m1b,IV91256m2b,IV91257m0a,IV91257m1a,IV91256,IV91257","Successful exploitation allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a DNAME record in the answer section of a response to a recursive query, related to db.c and resolver.c."
CVE-2016-9131,App10,$30000,2,7.5,0.85,1,0.8,5.1000000000000005,10.200000000000001,IBM,AIX 6.1,IBM AIX BIND Denial of Service Vulnerability (bind_advisory15),"The vendor has released fixes to resolve this vulnerability. Refer to AIX bind_advisory15 (https://aix.software.ibm.com/aix/efixes/security/bind_advisory15.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  AIX bind_advisory15: AIX 5.3, 6.1, 7.1, 7.2 (Bind) (https://aix.software.ibm.com/aix/efixes/security/bind_fix15.tar)","ISC BIND is vulnerable to a denial of service, caused by the
    improper handling of responses during recursion. By sending a malformed 
    response to a RTYPE ANY query, a remote attacker could exploit this 
    vulnerability to trigger an assertion failure.
Affected Versions:  
AIX 5.3, 6.1, 7.1, 7.2
 
APAR versions: 
IV93403m3a,IV93403m3a,IV93403m3a,IV93365m1a,IV93365m1a,IV93362m8a,IV93362m8a,IV93362m8a,IV93363m3a,IV93363m3a,IV93363m3a,IV93361m8a,IV93361m8a,IV93361m8a,IV93366m9a 
 
Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.",Successful exploitation allows remote attackers to cause a denial of service (assertion failure).
CVE-2018-0732,App3,$600000,2,7.5,0.85,1,0.8,5.1000000000000005,10.200000000000001,IBM,AIX 6.1,IBM Advanced Interactive eXecutive (AIX) Open Secure Sockets Layer (OpenSSL) Transport Layer Security (TLS) Handshake Denial Of Service (DoS) Vulnerability (openssl_advisory28),"The vendor has released fixes to resolve this vulnerability. Refer to AIX openssl_advisory28 (http://aix.software.ibm.com/aix/efixes/security/openssl_advisory28.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  openssl_advisory28 (http://aix.software.ibm.com/aix/efixes/security/openssl_advisory28.asc)","OpenSSL is vulnerable to a denial of service, caused by the sending of a very large prime value to the client by a malicious server during key agreement in a TLS handshake. By spending an unreasonably long period of time generating a key for this prime, a remote attacker could exploit this vulnerability to cause the client to hang.

Affected Platforms: 
AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2  
 Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.

QID Detection Logic (Authenticated): 
The detection checks for installed packages version via command : - ""lslpp -L"".  
It also checks for interim fixes installed using the command ""emgr -c"" or ""instfix -k"". 
The detection posts vulnerable if installed package version is less than patched version and interim fixes are also not installed.",A remote attacker could exploit this vulnerability to cause the client to hang.
"CVE-2021-35560,CVE-2021-35586,CVE-2021-35578,CVE-2021-35564,CVE-2021-35559,CVE-2021-35556,CVE-2021-35565,CVE-2021-35588",App3,$600000,2,7.5,0.85,1,0.8,5.1000000000000005,10.200000000000001,IBM,AIX 6.1,"IBM Java Software Development Kit (SDK) Multiple Vulnerabilities (Oracle October 19 2021 CPU (1.7.0_321, 1.8.0_311))","Latest service refresh packs are available at  IBM SDK, Java Technology Edition Download (https://developer.ibm.com/javasdk/downloads/).  
Refer to Oracle October 19 2021 CPU  (https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities#Oracle_October_19_2021_CPU) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  IBM Java SDK(Oracle October 19 2021 CPU (1.7.0_321, 1.8.0_311)) (https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities#Oracle_October_19_2021_CPU)","IBM Java SDK are prone to multiple vulnerabilities that can be exploited by malicious people to disclose certain sensitive information, manipulate certain data, bypass certain security restrictions, cause a denial of service and compromise a vulnerable system.

Affected Versions: 
IBM Java SDK prior to 7.0.11.0  
IBM Java SDK prior to 7.1.5.0  
IBM Java SDK prior to 8.0.7.0

NOTE:  
CVE-2021-35560 and CVE-2021-35578 are affected to IBM Java 8 only.

QID Detection Logic (Authenticated): 
The QID  runs ""java -version"" command to check if vulnerable IBM Java is installed on the system.","Successful exploitation of these vulnerabilities may affect the Confidentiality, Integrity and Availability."
CVE-2017-1541,App10,$30000,2,7.3,0.85,1,0.8,4.964,9.928,IBM,AIX 6.1,IBM AIX Java Multiple Vulnerabilities (java_july2017_advisory),"The vendor has released fixes to resolve this vulnerability. Refer to AIX Java6_advisory16 (http://aix.software.ibm.com/aix/efixes/security/java6_advisory.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  Java6_advisory (https://www-945.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~WebSphere&product=ibm/IBM+SDKs+for+Java+Technology/Java+Standard+Edition+%28Java+SE%29&release=6.0.0.0&platform=AIX+32-bit,+pSeries&function=all)","There is a vulnerability in the AIX IBM Java 6 SDK installp and updatep
 packages. 
A flaw in the AIX JRE/SDK installp and updatep packages 
        prevented the java.security, java.policy and javaws.policy files 
        from being updated correctly. 
Affected Versions:  
AIX 5.3, 6.1, 7.1, 7.2  
APAR versions:
J632SR16F3, J632SR16F4, J632SR16F5, J632SR16F7, J632S16F15, J632S16F20, J632S16F26, J632S16F30, J632S16F35, J632S16F41, J632S16F45

Note:The detection requires root privileges to run ""emgr -c"" or ""instfix -k"" to check for patches. In absence of such privileges, the detection may not output actual results.","Successful exploitation allows remote attackers to affect confidentiality, integrity, and availability impact."
"CVE-2016-7427,CVE-2016-7428,CVE-2016-9310,CVE-2016-9311",App10,$30000,2,6.5,0.85,1,0.8,4.42,8.84,IBM,AIX 6.1,IBM AIX NTP Denial of Service Vulnerability (ntp_advisory8.asc),"The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory ntp_advisory8 (http://aix.software.ibm.com/aix/efixes/security/ntp_advisory8.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  AIX Advisory ntp_advisory8: AIX 6.1, 7.1, 7.2 (ntp) (https://aix.software.ibm.com/aix/efixes/security/ntp_fix8.tar)","There are multiple vulnerabilities in NTPv3 and NTPv4 that impact AIX.  
NTPv3 and NTPv4 are vulnerable to:  
1. A denial of service, caused by an error
    in broadcast mode replay prevention functionality. By sending specially 
    crafted NTP packets, a local attacker could exploit this vulnerability to 
    cause a denial of service. (CVE-2016-7427) 
2. A denial of service, caused by an error 
    in broadcast mode poll interval enforcement functionality. By sending 
    specially crafted NTP packets, a remote attacker from within the local 
    network could exploit this vulnerability to cause a denial of service.(CVE-2016-7428 )  
3. A denial of service, caused by an error 
    in the control mode (mode 6) functionality. By sending specially crafted 
    control mode packets, a remote attacker could exploit this vulnerability 
    to obtain sensitive information and cause the application to crash. (CVE-2016-9310) 
4. A denial of service, caused by a NULL 
    pointer dereference when trap service has been enabled. By sending specially 
    crafted packets, a remote attacker could exploit this vulnerability to cause
    the application to crash. (CVE-2016-9311)  
Affected Platforms: 
    AIX 6.1, AIX 7.1, AIX 7.2

APAR versions: 
IV91803,IV92287,IV91951,IV92126,IV92192

Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.",A remote attacker could exploit this vulnerability to obtain sensitive information and cause the application to crash.
CVE-2018-0739,App3,$600000,2,6.5,0.85,1,0.8,4.42,8.84,IBM,AIX 6.1,IBM Advanced Interactive eXecutive (AIX) Open Secure Sockets Layer (OpenSSL) Denial of Service (DoS) Vulnerability (openssl_advisory26),"The vendor has released fixes to resolve this vulnerability. Refer to AIX openssl_advisory26 (http://aix.software.ibm.com/aix/efixes/security/openssl_advisory26.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  openssl_advisory26 (https://aix.software.ibm.com/aix/efixes/security/openssl_fix26.tar)","OpenSSL is prone to a denial-of-service vulnerability. 
 OpenSSL could allow a remote attacker to cause a denial-of-service condition, caused by a flaw in the Constructed ASN.1 types with a recursive definition (such as can be found in PKCS7) that could eventually exceed the stack given malicious input with excessive recursion. (CVE-2017-3737)

Affected Versions:  
AIX 5.3,6.1, 7.1, 7.2 
 
Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.

QID Detection Logic (Authenticated): 
The detection checks for installed packages version via command : - ""lslpp -L"".  
It also checks for interim fixes installed using the command ""emgr -c"". 
The detection posts vulnerable if installed package version is less than patched version and interim fixes are also not installed.",An attacker can exploit this issue to cause a denial-of-service condition.
"CVE-2015-3197,CVE-2015-4000",App10,$30000,2,5.9,0.85,1,0.8,4.0120000000000005,8.024000000000001,IBM,AIX 6.1,IBM AIX OpenSSL Multiple Vulnerabilities,"The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory (http://aix.software.ibm.com/aix/efixes/security/openssl_advisory17.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  IBM AIX OpenSSL Multiple Vulnerabilities: AIX 5.3, 6.1, 7.1, 7.2 (ftp://aix.software.ibm.com/aix/efixes/security/openssl_fix17.tar)","AIX is prone to the following vulnerabilities:
 
A malicious client can negotiate SSLv2 ciphers that have been 
        disabled on the server and complete SSLv2 handshakes even if all SSLv2 
        ciphers have been disabled, provided that the SSLv2 protocol was not 
        disabled via SSL_OP_NO_SSLv2.
 
A previously published vulnerability in the TLS protocol 
        allows a man-in-the-middle attacker to downgrade vulnerable TLS 
        connections using ephemeral Diffie-Hellman key exchange to 512-bit 
        export-grade cryptography. This vulnerability is known as 'Logjam'.
	    AIX OpenSSL had the Logjam mitigation for TLS clients by rejecting 
	    handshakes with DH parameters shorter than 768 bits. This limit has 
        now been increased to 1024 bits.
 
Affected Platforms: 
AIX 5.3, 6.1, 7.1, 7.2 are affected.
 
Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results. APAR versions: IV81287m9b,IV81287m9a,IV81287m9c",Exploitation could allow an attacker to conduct man-in-the-middle attacks.
CVE-2015-7575,App10,$30000,2,5.9,0.85,1,0.8,4.0120000000000005,8.024000000000001,IBM,AIX 6.1,"IBM AIX OpenSSL MD5 ""SLOTH"" Vulnerability","The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory (http://aix.software.ibm.com/aix/efixes/security/openssl_advisory16.asc) to obtain more information
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  IBM AIX OpenSSL MD5 ""SLOTH"" Vulnerability: AIX 5.3, 6.1, 7.1, 7.2 (https://www14.software.ibm.com/webapp/iwm/web/preLogin.do?source=aixbp)","AIX is prone to the following vulnerabilities: The TLS protocol could allow weaker than expected security 
        caused by a collision attack when using the MD5 hash function for 
        signing a ServerKeyExchange message during a TLS handshake.  Affected Platforms: AIX 5.3, 6.1, 7.1 and 7.2 are affected

Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.",An attacker could exploit this vulnerability using man-in-the-middle techniques to impersonate a TLS server and obtain credentials.
"CVE-2015-7575,CVE-2016-0266",App10,$30000,2,5.9,0.85,1,0.8,4.0120000000000005,8.024000000000001,IBM,AIX 6.1,IBM AIX Sendmail MD5 and TLS Vulnerability,"The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory (http://aix.software.ibm.com/aix/efixes/security/nettcp_advisory2.asc) to obtain more information
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  nettcp_advisory2: AIX 5.3, 6.1, 7.1, 7.2 (ftp://aix.software.ibm.com/aix/efixes/security/nettcp_fix2.tar)","AIX is prone to the following vulnerabilities: 
The TLS protocol could allow weaker than expected security caused by a collision attack when using the MD5 hash function for signing a ServerKeyExchange message during a TLS handshake. (CVE-2015-7575)
 
IBM AIX does not require the newest version of TLS by default which could allow a remote attacker to obtain sensitive information using man in the middle techniques. (CVE-2016-0266)
 
Affected Platforms: AIX
 Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.  APAR versions: IV86120m9a,IV86116m5b,IV86116m6a,IV86116m7a,IV86117m5a,IV86117m6a,IV86117m7a,IV86118m2a",An attacker could exploit this vulnerability using man-in-the-middle techniques to impersonate a TLS server and obtain credentials.
"CVE-2017-3142,CVE-2017-3143",App10,$30000,2,5.9,0.85,1,0.8,4.0120000000000005,8.024000000000001,IBM,AIX 6.1,IBM AIX BIND Security Bypass Vulnerability (bind_advisory16),"The vendor has released fixes to resolve this vulnerability. Refer to AIX bind_advisory16 (https://aix.software.ibm.com/aix/efixes/security/bind_advisory16.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  bind_advisory16 (https://aix.software.ibm.com/aix/efixes/security/bind_advisory16.asc)","ISC BIND could allow a remote attacker to bypass security 
        restrictions, caused by an error when an attacker can send and receive 
        messages to an authoritative DNS server and has knowledge of a valid 
        TSIG key name.  
Affected Versions:  
AIX 5.3,6.1, 7.1,7.2
 
APAR versions: 
IV98826m9a,  IV98828m4a, IV98828m5b, IV98829m0a, IV98829m0b, IV98830m1a, IV98830m1b, IV98825m9a 
 
Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.","By sending a specially crafted request packet, an 
        attacker could exploit this vulnerability to bypass TSIG authentication
        on AXFR requests and transfer the target zone."
CVE-2017-3737,App3,$600000,2,5.9,0.85,1,0.8,4.0120000000000005,8.024000000000001,IBM,AIX 6.1,IBM Advanced Interactive eXecutive (AIX) Open Secure Sockets Layer (OpenSSL) Security Bypass Vulnerability (openssl_advisory25),"The vendor has released fixes to resolve this vulnerability. Refer to AIX openssl_advisory25 (http://aix.software.ibm.com/aix/efixes/security/openssl_advisory25.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  openssl_advisory25 (https://aix.software.ibm.com/aix/efixes/security/openssl_fix25.tar)","OpenSSL is prone to a security-bypass vulnerability. 
 OpenSSL could allow a remote attacker to bypass security restrictions, caused by a flaw in the ""error state"" mechanism when directly calling SSL_read() or SSL_write() for an SSL object after receiving a fatal error. An attacker could exploit this vulnerability       to bypass the decryption or encryption process and perform unauthorized actions. (CVE-2017-3737)

Affected Versions:  
AIX 5.3,6.1, 7.1, 7.2 
 
Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.

QID Detection Logic (Authenticated): 
The detection checks for installed packages version via command : - ""lslpp -L"".  
It also checks for interim fixes installed using the command ""emgr -c"". 
The detection posts vulnerable if installed package version is less than patched version and interim fixes are also not installed.",Successfully exploiting this issue will allow attackers to bypass security restrictions and perform unauthorized actions; this may aid in launching further attacks.
"CVE-2018-0734,CVE-2018-5407",App3,$600000,2,5.9,0.85,1,0.8,4.0120000000000005,8.024000000000001,IBM,AIX 6.1,IBM Advanced Interactive eXecutive (AIX) Open Secure Sockets Layer (OpenSSL) Multiple Security Vulnerabilities (openssl_advisory29),"The vendor has released fixes to resolve this vulnerability. Refer to AIX openssl_advisory29 (http://aix.software.ibm.com/aix/efixes/security/openssl_advisory29.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  openssl_advisory29 (https://aix.software.ibm.com/aix/efixes/security/openssl_advisory29.asc)","Multiple Security vulnerabilities are detected in OpenSSL.
CVE-2018-0734: OpenSSL could allow a remote attacker to obtain sensitive information, caused by a timing side channel attack in the DSA signature algorithm.

CVE-2018-5407(PortSmash): Multiple SMT/Hyper-Threading architectures and processors could allow a local attacker to obtain sensitive information, caused by execution engine sharing on Simultaneous Multithreading (SMT) architecture.

Affected Platforms: 
AIX 5.3
AIX 6.1
AIX 7.1
AIX 7.2

Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.

QID Detection Logic (Authenticated): 
The detection checks for installed packages version via command : - ""lslpp -L"".  
It also checks for interim fixes installed using the command ""emgr -c"" or ""instfix -k"". 
The detection posts vulnerable if installed package version is less than patched version and interim fixes are also not installed.","An attacker could exploit this vulnerability using variations in the signing algorithm to recover the private key. 
An attacker could run a malicious process next to legitimate processes using the architectures parallel thread running capabilities to leak encrypted data from the CPU's internal processes."
CVE-2018-0737,App3,$600000,2,5.9,0.85,1,0.8,4.0120000000000005,8.024000000000001,IBM,AIX 6.1,IBM Advanced Interactive eXecutive (AIX) Open Secure Sockets Layer (OpenSSL) Side Channel Attack Information Disclosure Vulnerability (openssl_advisory27),"The vendor has released fixes to resolve this vulnerability. Refer to AIX openssl_advisory27 (http://aix.software.ibm.com/aix/efixes/security/openssl_advisory27.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  openssl_advisory27 (https://www14.software.ibm.com/webapp/iwm/web/preLogin.do?source=aixbp)","The OpenSSL RSA Key generation algorithm is vulnerable to a cache timing side channel attack.  
A local user that can conduct a cache timing side channel attack against the RSA key generation algorithm's BN_mod_inverse() and BN_mod_exp_mont() functions may be able to recover the private key. Affected Platforms: AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2 Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.
 
QID Detection Logic (Authenticated): 
The detection checks for installed packages version via command : - ""lslpp -L"".  
It also checks for interim fixes installed using the command ""emgr -c"" or ""instfix -k"". 
The detection posts vulnerable if installed package version is less than patched version and interim fixes are also not installed.",An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could recover the private key.
CVE-2021-44228,App10,$15000,1,10,1,1,0.8,8,8,Apache,AIX 6.1,Apache Log4j Remote Code Execution (RCE) Vulnerability (Log4Shell),"Apache is recommending customers to upgrade to Log4j 2.3.1 (for Java 6), 2.12.3 (for Java 7), or 2.17.0 (for Java 8 and later). If updating the version is not possible, please refer to the mitigations mentioned here Log4j (https://logging.apache.org/log4j/2.x/security.html). 
NOTE: This detection checks only version information and does not check for workaround. 
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  Apache Log4j (https://logging.apache.org/log4j/2.x/download.html)","A zero-day exploit affecting the popular Apache Log4j utility (CVE-2021-44228) was made public on December 9, 2021 that results in remote code execution (RCE).

Affected versions: 
Log4j versions  2.x prior to and including  2.14.1 (exclude 2.12.x) 
Log4j versions 2.12.x prior to 2.12.2

QID Detection: (Authenticated) - Linux 
Detection logic is checking for vulnerable jar version and also checks for JNDI Class is present or not.

This detection logic is updated to find log4j installs using the locate command and ls proc command. These updates are in VULNSIGS-2.5.352-4

QID Detection: (Authenticated) - Windows 
On Windows system, the QID identifies vulnerable instance of log4j via WMI to check log4j included in the running processes via command-line.
 
 
Note:QID 376157 also leverages the OS package manager to identify vulnerable Log4j packages.This method checks only version information and does not check for workaround.

Note: Please provide Oracle auth records for scanning Oracle Database instances.",Successful exploitation of this vulnerability could lead to  remote code execution (RCE) on the target.
CVE-2021-44228,App2,$500000,1,10,1,1,0.8,8,8,Apache,AIX 6.1,Apache Log4j Remote Code Execution (RCE) Vulnerability (Log4Shell),"Apache is recommending customers to upgrade to Log4j 2.3.1 (for Java 6), 2.12.3 (for Java 7), or 2.17.0 (for Java 8 and later). If updating the version is not possible, please refer to the mitigations mentioned here Log4j (https://logging.apache.org/log4j/2.x/security.html). 
NOTE: This detection checks only version information and does not check for workaround. 
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  Apache Log4j (https://logging.apache.org/log4j/2.x/download.html)","A zero-day exploit affecting the popular Apache Log4j utility (CVE-2021-44228) was made public on December 9, 2021 that results in remote code execution (RCE).

Affected versions: 
Log4j versions  2.x prior to and including  2.14.1 (exclude 2.12.x) 
Log4j versions 2.12.x prior to 2.12.2

QID Detection: (Authenticated) - Linux 
Detection logic is checking for vulnerable jar version and also checks for JNDI Class is present or not.

This detection logic is updated to find log4j installs using the locate command and ls proc command. These updates are in VULNSIGS-2.5.352-4

QID Detection: (Authenticated) - Windows 
On Windows system, the QID identifies vulnerable instance of log4j via WMI to check log4j included in the running processes via command-line.
 
 
Note:QID 376157 also leverages the OS package manager to identify vulnerable Log4j packages.This method checks only version information and does not check for workaround.

Note: Please provide Oracle auth records for scanning Oracle Database instances.",Successful exploitation of this vulnerability could lead to  remote code execution (RCE) on the target.
CVE-2021-44228,App3,$300000,1,10,1,1,0.8,8,8,Apache,AIX 6.1,Apache Log4j Remote Code Execution (RCE) Vulnerability (Log4Shell),"Apache is recommending customers to upgrade to Log4j 2.3.1 (for Java 6), 2.12.3 (for Java 7), or 2.17.0 (for Java 8 and later). If updating the version is not possible, please refer to the mitigations mentioned here Log4j (https://logging.apache.org/log4j/2.x/security.html). 
NOTE: This detection checks only version information and does not check for workaround. 
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  Apache Log4j (https://logging.apache.org/log4j/2.x/download.html)","A zero-day exploit affecting the popular Apache Log4j utility (CVE-2021-44228) was made public on December 9, 2021 that results in remote code execution (RCE).

Affected versions: 
Log4j versions  2.x prior to and including  2.14.1 (exclude 2.12.x) 
Log4j versions 2.12.x prior to 2.12.2

QID Detection: (Authenticated) - Linux 
Detection logic is checking for vulnerable jar version and also checks for JNDI Class is present or not.

This detection logic is updated to find log4j installs using the locate command and ls proc command. These updates are in VULNSIGS-2.5.352-4

QID Detection: (Authenticated) - Windows 
On Windows system, the QID identifies vulnerable instance of log4j via WMI to check log4j included in the running processes via command-line.
 
 
Note:QID 376157 also leverages the OS package manager to identify vulnerable Log4j packages.This method checks only version information and does not check for workaround.

Note: Please provide Oracle auth records for scanning Oracle Database instances.",Successful exploitation of this vulnerability could lead to  remote code execution (RCE) on the target.
CVE-2016-0266,App2,$1500000,3,3.7,0.85,1,0.8,2.516,7.548,IBM,AIX 6.1,IBM AIX pconsole Information Disclosure Vulnerability (pconsole_advisory2.asc),"The vendor has released fixes to resolve this vulnerability. Refer to AIX pconsole_advisory2.asc (http://aix.software.ibm.com/aix/efixes/security/pconsole_advisory2.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  AIX pconsole_advisory2.asc: AIX 6.1, 7.1 (            https://aix.software.ibm.com/aix/efixes/security/pconsole_fix2.tar )","IBM AIX is prone to a remote information-disclosure vulnerability.
 IBM AIX 6.1 and 7.1 do not default to the latest TLS version, which makes it easier for man-in-the-middle attackers to obtain sensitive information via unspecified vectors.(CVE-2016-0266)
 
Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.
 
APAR versions: 
IV89737s2a, IV89737, IV89739s7a, IV89739",Remote attackers can exploit this issue to obtain sensitive information that may lead to further attacks.
CVE-2017-3735,App3,$600000,2,5.3,0.85,1,0.8,3.604,7.208,IBM,AIX 6.1,IBM AIX OpenSSL Security Bypass Vulnerability (openssl_advisory24),"The vendor has released fixes to resolve this vulnerability. Refer to AIX openssl_advisory24 (http://aix.software.ibm.com/aix/efixes/security/openssl_advisory24.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  openssl_advisory24 (https://www14.software.ibm.com/webapp/iwm/web/reg/download.do?source=aixbp&lang=en_US&S_PKG=openssl&cp=UTF-8)","OpenSSL is prone to a security-bypass vulnerability. 
 If an X.509 certificate has a malformed IPAddressFamily extension, OpenSSL could do a one-byte buffer overread. The most likely result could be an erroneous display of the certificate in text format.

Affected Versions:  
AIX 5.3,6.1, 7.1, 7.2 
 
Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.
 
QID Detection Logic (Authenticated): 
The detection checks for installed packages version via command : - ""lslpp -L"".  
It also checks for interim fixes installed using the command ""emgr -c"". 
The detection posts vulnerable if installed package version is less than patched version and interim fixes are also not installed.",Successfully exploiting this issue will allow attackers to bypass security restrictions and perform unauthorized actions; this may aid in launching further attacks.
CVE-2004-0230,App10,$75000,5,2,0.85,1,0.8,1.36,6.800000000000001,Others,AIX 6.1,TCP Sequence Number Approximation Based Denial of Service,"Please first check the results section below for the port number on which this vulnerability was detected. If that port number is known to be used for port-forwarding, then it is the backend host that is really vulnerable.
 
Various implementations and products including Check Point, Cisco, Cray Inc, Hitachi, Internet Initiative Japan, Inc (IIJ), Juniper Networks, NEC, Polycom, and Yamaha are currently undergoing review. Contact the vendors to obtain more information about affected products and fixes. NISCC Advisory 236929 - Vulnerability Issues in TCP (http://packetstormsecurity.org/0404-advisories/246929.html) details the vendor patch status as of the time of the advisory, and identifies resolutions and workarounds.
 
Refer to US-CERT Vulnerability Note VU#415294 (http://www.kb.cert.org/vuls/id/415294) and OSVDB Article 4030 (http://osvdb.org/4030) to obtain a list of vendors affected by this issue and a note on resolutions (if any) provided by the vendor.
 
For Microsoft: Refer to MS05-019 (https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-019) and MS06-064 (https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-064) for further details.
 
For SGI IRIX: Refer to SGI Security Advisory 20040905-01-P (ftp://patches.sgi.com/support/free/security/advisories/20040905-01-P.asc)
 
For SCO UnixWare 7.1.3 and 7.1.1: Refer to SCO Security Advisory SCOSA-2005.14 (ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.14/SCOSA-2005.14.txt)
 
For Solaris (Sun Microsystems): The vendor has acknowledged the vulnerability; however a patch is not available. Refer to Sun Microsystems, Inc. Information for VU#415294 (http://www.kb.cert.org/vuls/id/JARL-5YGQAJ) to obtain additional details. Also, refer to TA04-111A (http://www.us-cert.gov/cas/techalerts/TA04-111A.html) for detailed mitigating strategies against these attacks.
 
For NetBSD: Refer to NetBSD-SA2004-006 (ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-006.txt.asc)
 
For Cisco: Refer to cisco-sa-20040420-tcp-ios.shtml (http://www.cisco.com/warp/public/707/cisco-sa-20040420-tcp-ios.shtml).
 
For IBM : Refer to IBM-tcp-sequence-number-cve-2004-0230 (https://www.ibm.com/support/pages/tcp-sequence-number-approximation-based-denial-service-cve-2004-0230).
 
For Red Hat Linux: There is no fix available.

Workaround: The following BGP-specific workaround information has been provided.
 
For BGP implementations that support it, the TCP MD5 Signature Option should be enabled. Passwords that the MD5 checksum is applied to should be set to strong values and changed on a regular basis.
 
Secure BGP configuration instructions have been provided for Cisco and Juniper at these locations:
 
Secure Cisco IOS BGP Template (http://www.cymru.com/Documents/secure-bgp-template.html)
 
JUNOS Secure BGP Template (http://www.cymru.com/gillsr/documents/junos-bgp-template.pdf)","TCP provides stateful communications between hosts on a network. TCP sessions are established by a three-way handshake and use random 32-bit sequence and acknowledgement numbers to ensure the validity of traffic. A vulnerability was reported that may permit TCP sequence numbers to be more easily approximated by remote attackers. This issue affects products released by multiple vendors.  
 
The cause of the vulnerability is that affected implementations will accept TCP sequence numbers within a certain range, known as the acknowledgement range, of the expected sequence number for a packet in the session. This is determined by the TCP window size, which is negotiated during the three-way handshake for the session. Larger TCP window sizes may be set to allow for more throughput, but the larger the TCP window size, the more probable it is to guess a TCP sequence number that falls within an acceptable range. It was initially thought that guessing an acceptable sequence number was relatively difficult for most implementations given random distribution, making this type of attack impractical. However, some implementations may make it easier to successfully approximate an acceptable TCP sequence number, making these attacks possible with a number of protocols and implementations.
 
This is further compounded by the fact that some implementations may support the use of the TCP Window Scale Option, as described in RFC 1323, to extend the TCP window size to a maximum value of 1 billion.
 
This vulnerability will permit a remote attacker to inject a SYN or RST packet into the session, causing it to be reset and effectively allowing for denial of service attacks. An attacker would exploit this issue by sending a packet to a receiving implementation with an approximated sequence number and a forged source IP address and TCP port.
 
There are a few factors that may present viable target implementations, such as those which depend on long-lived TCP connections, those that have known or easily guessed IP address endpoints and those implementations with easily guessed TCP source ports. It has been noted that Border Gateway Protocol (BGP) is reported to be particularly vulnerable to this type of attack, due to the use of long-lived TCP sessions and the possibility that some implementations may use the TCP Window Scale Option. As a result, this issue is likely to affect a number of routing platforms.
 
Another factor to consider is the relative difficulty of injecting packets into TCP sessions, as a number of receiving implementations will reassemble packets in order, dropping any duplicates. This may make some implementations more resistant to attacks than others.
 
It should be noted that while a number of vendors have confirmed this issue in various products, investigations are ongoing and it is likely that many other vendors and products will turn out to be vulnerable as the issue is investigated further.",Successful exploitation of this issue could lead to denial of service attacks on the TCP based services of target hosts.
CVE-2012-1675,App3,$1500000,5,2,0.85,1,0.8,1.36,6.800000000000001,Oracle,AIX 6.1,Oracle Database TNS Listener Poison Attack Vulnerability,"Oracle has released a patch to resolve this issue. Refer to Oracle CVE-2012-1675 Alert (https://www.oracle.com/technetwork/topics/security/alert-cve-2012-1675-1608180.html) to obtain more information.

Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  Oracle Security Alert for CVE-2012-1675 (https://www.oracle.com/technetwork/topics/security/alert-cve-2012-1675-1608180.html)

Virtual Patches:
Trend Micro Virtual Patching(http://www.trendmicro.com/vulnerabilitycontrols)
Virtual Patch #1004997: 1004997 - Detected Too Many Oracle TNS Service Register Requests","A vulnerability exists in the Listener component of Oracle Database Server. Easily exploitable vulnerability allows successful unauthenticated network attacks via Oracle Net. Successful attack of this vulnerability can result in unauthorized update, insert or delete access to all Listener accessible data as well as read access to all Listener accessible data and ability to cause a partial denial of service (partial DOS) of Listener.
 
This vulnerability allows an attacker to perform a man-in-the-middle attack by registering an additional database instance in the TNS listener. The listener will then start load-balancing traffic to the new instance. This allows the attacker to receive the database transactions, record them and forward them to the original database.  The attacker could also potentially modify the transactions and execute commands on the original database server. 
 
This QID sends a request to register with the listener with the following command:
 
(CONNECT_DATA=(COMMAND=service_register_NSGR))
 
If the listener acknowledges and allows the scanner to register, then the QID is posted. If Oracle suggested solution is applied then the listener should not allow the scanner to register successfully.
 
Affected Products and Versions: 
Oracle Database 11g Release 2, versions 11.2.0.2, 11.2.0.3, 11.2.0.4 
Oracle Database 11g Release 1, version 11.1.0.7 
Oracle Database 10g Release 2, versions 10.2.0.3, 10.2.0.4, 10.2.0.5 
NOTE: Although Oracle Database prior to 10g versions are not listed in the Oracle advisory, older versions of Oracle not covered by their lifetime policy and as per advisory, they could be affected.","This vulnerability allows an attacker to receive the database transactions, record them and forward them to the original database. The attacker can potentially modify the transactions and execute commands on the original database server. 
 
This vulnerability may be remotely exploitable without authentication, i.e. it may be exploited over a network without the need for a username and password."
"CVE-2016-0800,CVE-2016-0798,CVE-2016-0702,CVE-2016-0705,CVE-2016-0799,CVE-2016-0797",App3,$300000,1,9.8,0.85,1,0.8,6.664000000000001,6.664000000000001,IBM,AIX 6.1,IBM AIX OpenSSL Multiple Vulnerabilities,"The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory (http://aix.software.ibm.com/aix/efixes/security/openssl_advisory18.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  IBM AIX OpenSSL Multiple Vulnerabilities : AIX 5.3, 6.1, 7.1, 7.2 (https://www14.software.ibm.com/webapp/iwm/web/preLogin.do?source=aixbp)","AIX is prone to the following vulnerabilities: A cross-protocol attack was discovered that could lead to 
	    decryption of TLS sessions by using a server supporting 
	    SSLv2 and EXPORT cipher suites as a Bleichenbacher RSA 
	    padding oracle. This vulnerability is known as DROWN.
 
The fmtstr function improperly calculates string lengths, 
	    which allows remote attackers to cause a denial of service 
	    (overflow and out-of-bounds read) or possibly have 
	    unspecified other impact via a long string.
 
An attacker with an invalid username connecting to SRP 
	    servers that is configured with a secret seed to hide 
	    valid login information are vulnerable to a memory leak 
	    of around 300 bytes per connection.
 
Multiple integer overflows allow remote attackers to cause
	    a denial of service (heap memory corruption or NULL pointer 
	    dereference) or possibly have unspecified other impact via 
	    a long digit string that is mishandled by the BN_dec2bn or 
	    BN_hex2bn function.
 
A double free bug was discovered when OpenSSL parses 
	    malformed DSA private keys and could lead to a DoS attack 
	    or memory corruption for applications that receive DSA 
	    private keys from untrusted sources.
 
A side-channel attack was found which makes use of cache-bank 
	    conflicts on the Intel Sandy-Bridge microarchitecture which 
	    could lead to the recovery of RSA keys.
 Affected Platforms: AIX 5.3, 6.1, 7.1, 7.2
 Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results. APAR versions: IV83169m9b,IV83169m9a,IV83169s9d,IV83169m9c",Exploitation could lead to buffer overflow or disclosure of sensitive information.
"CVE-2016-2176,CVE-2016-2109,CVE-2016-2108,CVE-2016-2106,CVE-2016-2105",App3,$300000,1,9.8,0.85,1,0.8,6.664000000000001,6.664000000000001,IBM,AIX 6.1,IBM AIX OpenSSL Multiple Vulnerabilities,"The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory (http://aix.software.ibm.com/aix/efixes/security/openssl_advisory20.asc) to obtain more information
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  openssl_advisory20.asc: AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2 (ftp://aix.software.ibm.com/aix/efixes/security/openssl_advisory20.asc.sig)","AIX is prone to the following vulnerabilities: 
 OpenSSL could allow a remote attacker to obtain sensitive information, by sending an overly long ASN.1 string to the X509_NAME_oneline() function. (CVE-2016-2176) 
OpenSSL could allow a remote attacker to execute arbitrary code on the system, caused by a buffer underflow when deserializing untrusted ASN.1 structures and later reserializes them. (CVE-2016-2108) 
OpenSSL is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by the EVP_EncryptUpdate() function. (CVE-2016-2105, CVE-2016-2106) 
 Affected Platforms: AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2 Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.",An attacker could exploit this vulnerability to consume all available resources and exhaust memory.
"CVE-2016-2177,CVE-2016-2178,CVE-2016-2179,CVE-2016-2180,CVE-2016-2181,CVE-2016-2182,CVE-2016-2183,CVE-2016-6302,CVE-2016-6303,CVE-2016-6304,CVE-2016-6306,CVE-2016-7052",App3,$300000,1,9.8,0.85,1,0.8,6.664000000000001,6.664000000000001,IBM,AIX 6.1,IBM AIX OpenSSL Multiple Vulnerabilities (openssl_advisory21),"The vendor has released fixes to resolve this vulnerability. Refer to AIX openssl_advisory21 (http://aix.software.ibm.com/aix/efixes/security/openssl_advisory21.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  AIX openssl_advisory21: AIX 5.3, 6.1, 7.1 and 7.2 (OpenSSL) (https://www14.software.ibm.com/webapp/iwm/web/preLogin.do?source=aixbp)","AIX is prone to the following vulnerabilities: 
 OpenSSL is vulnerable to a denial of service, caused by the incorrect use of pointer arithmetic for heap-buffer boundary checks.(CVE-2016-2177) 
OpenSSL could allow a remote attacker to obtain sensitive information, caused by an error in the DSA implementation that allows the following of a non-constant time codepath for certain operations. (CVE-2016-2178) 
OpenSSL is vulnerable to a denial of service. By sending specially crafted DTLS record fragments to fill up buffer queues, a remote attacker could exploit this vulnerability to open a large number of simultaneous connections and consume all available memory resources. (CVE-2016-2179) 
OpenSSL is vulnerable to a denial of service, caused by an out-of-bounds read in the TS_OBJ_print_bio function.(CVE-2016-2180) 
OpenSSL is vulnerable to a denial of service, caused by an error in the DTLS replay protection implementation.(CVE-2016-2181) 
OpenSSL is vulnerable to a denial of service, caused by an out-of-bounds write in the TS_OBJ_print_bio function in crypto/bn/bn_print.c. (CVE-2016-2182) 
OpenSSL could allow a remote attacker to obtain sensitive information, caused by an error in the in the Triple-DES on 64-bit block cipher, used as a part of the SSL/TLS protocol. (CVE-2016-2183) 
OpenSSL is vulnerable to a denial of service, caused by the failure to consider the HMAC size during validation of the ticket length by the tls_decrypt_ticket function. (CVE-2016-6302) 
OpenSSL is vulnerable to a denial of service, caused by an integer overflow in the MDC2_Update function.(CVE-2016-6303) 
OpenSSL is vulnerable to a denial of service. By repeatedly requesting renegotiation, a remote authenticated attacker could send an overly large OCSP Status Request extension to consume all available memory resources. (CVE-2016-6304) 
OpenSSL is vulnerable to a denial of service, caused by missing message length checks when parsing certificates. (CVE-2016-6306) 
OpenSSL is vulnerable to a denial of service, caused by a missing CRL sanity check. By attempting to use CRLs, a remote attacker could exploit this vulnerability to cause the application to crash. (CVE-2016-7052)
 Affected Platforms: AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2

Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.",An attacker could exploit this vulnerability to consume all available resources and exhaust memory.
CVE-2016-2842,App3,$300000,1,9.8,0.85,1,0.8,6.664000000000001,6.664000000000001,IBM,AIX 6.1,IBM AIX OpenSSL Denial of Service Vulnerability,"The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory (http://aix.software.ibm.com/aix/efixes/security/openssl_advisory19.asc) to obtain more information
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  IBM AIX OpenSSL Denial of Service Vulnerability: AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2 (ftp://aix.software.ibm.com/aix/efixes/security/openssl_fix18.tar)","AIX is prone to the following vulnerabilities:  OpenSSL is vulnerable to a denial of service, caused by the failure to verify that a certain memory allocation succeeds by the doapr_outch function. A remote attacker could exploit this vulnerability using a specially crafted string to cause an out-of-bounds write or consume an overly large amount of resources.   Affected Platforms: AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2 Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.",A remote attacker could exploit this vulnerability using a specially crafted string to cause an out-of-bounds write or consume an overly large amount of resources.
"CVE-2016-3115,CVE-2016-1908",App3,$300000,1,9.8,0.85,1,0.8,6.664000000000001,6.664000000000001,IBM,AIX 6.1,IBM AIX OpenSSH Remote Code Execution Vulnerability,"The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory (http://aix.software.ibm.com/aix/efixes/security/openssh_advisory8.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  IBM AIX OpenSSH Remote Code Execution Vulnerability: AIX 5.3, 6.1, 7.1, 7.2 (https://aix.software.ibm.com/aix/efixes/security/openssh_fix8.tar)","IBM AIX is prone to the following vulnerabilities:
 
OpenSSH could allow a remote authenticated attacker to
        execute arbitrary commands on the system, caused by improper
        validation of user-supplied X11 authentication credentials by the sshd
        server. By sending specially crafted X11 credential data, an attacker
        could exploit this vulnerability to inject xauth commands and execute
        arbitrary commands on the system with the privileges of the victim.
 
OpenSSH could allow a remote authenticated attacker to bypass
        security restrictions, caused by the improper handling of errors when
        generating authentication cookies for untrusted X11 forwarding. An
        attacker could exploit this vulnerability to gain access to the target
        local X server.
 
Affected Platforms: 
AIX 5.3, 6.1, 7.1 and 7.2
 
Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results. APAR versions: IV84698m9a,IV84698m9b",Exploitation could allow a remote attacker to execute arbitrary code.
"CVE-2016-7922,CVE-2016-7923,CVE-2016-7924,CVE-2016-7925,CVE-2016-7926,CVE-2016-7927,CVE-2016-7928,CVE-2016-7930,CVE-2016-7931,CVE-2016-7932,CVE-2016-7933,CVE-2016-7934,CVE-2016-7935,CVE-2016-7936,CVE-2016-7937,CVE-2016-7939,CVE-2016-7940,CVE-2016-7973,CVE-2016-7974,CVE-2016-7975,CVE-2016-7983,CVE-2016-7984,CVE-2016-7992,CVE-2016-7993,CVE-2016-8574,CVE-2016-8575,CVE-2017-5202,CVE-2017-5203,CVE-2017-5204,CVE-2017-5482,CVE-2017-5483,CVE-2017-5484,CVE-2017-5485,CVE-2017-5486",App3,$300000,1,9.8,0.85,1,0.8,6.664000000000001,6.664000000000001,IBM,AIX 6.1,IBM AIX tcpdump Buffer Overflow Vulnerabilities (tcpdump_advisory2),"The vendor has released fixes to resolve this vulnerability. Refer to AIX tcpdump_advisory2 (http://aix.software.ibm.com/aix/efixes/security/tcpdump_advisory2.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  AIX tcpdump_advisory2: AIX 5.3, 6.1, 7.1, 7.2 (tcpdump) (https://aix.software.ibm.com/aix/efixes/security/tcpdump_fix2.tar )","AIX is prone to the following vulnerabilities:
 
tcpdump is vulnerable to multiple buffer overflow vulnerabilities caused by improper bounds checking by the parser.
 
Affected Platforms: 
AIX 5.3, 6.1, 7.1, 7.2
 Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results. APAR versions: IV94729s9b, IV94728s9c,IV94727s9b,IV94726s4c,IV94724s4b,IV94723s2a",Exploitation might allow a remote attacker to cause the application to crash.
"CVE-2017-10108,CVE-2017-1376,CVE-2017-1541,CVE-2017-10053,CVE-2017-10067,CVE-2017-10078,CVE-2017-10087,CVE-2017-10089,CVE-2017-10090,CVE-2017-10096,CVE-2017-10101,CVE-2017-10102,CVE-2017-10105,CVE-2017-10107,CVE-2017-10109,CVE-2017-10110,CVE-2017-10115,CVE-2017-10116,CVE-2017-10125,CVE-2017-10243",App3,$300000,1,9.8,0.85,1,0.8,6.664000000000001,6.664000000000001,IBM,AIX 6.1,IBM AIX Java Multiple Vulnerabilities (java_july2017_advisory),"The vendor has released fixes to resolve this vulnerability. Refer to AIX java_july2017_advisory (http://aix.software.ibm.com/aix/efixes/security/java_july2017_advisory.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  java_july2017_advisory: AIX (https://aix.software.ibm.com/aix/efixes/security/java_july2017_advisory.asc)","There are multiple vulnerabilities in IBM SDK Java Technology Edition Versions 6, 7, 7.1, 8 that are used by AIX. These issues were disclosed as part of the IBM Java SDK updates in July 2017.
 
Affected Versions:-  
AIX 5.3, 6.1, 7.1, 7.2","Successful exploitation allows remote attackers to affect confidentiality, integrity, and availability impact."
"CVE-2017-13024,CVE-2017-12996,CVE-2017-12995,CVE-2017-13027,CVE-2017-12993,CVE-2017-13021,CVE-2017-13022,CVE-2017-12990,CVE-2017-13028,CVE-2017-13029,CVE-2017-12999,CVE-2017-12998,CVE-2017-13033,CVE-2017-13032,CVE-2017-13031,CVE-2017-13030,CVE-2017-13037,CVE-2017-13036,CVE-2017-13035,CVE-2017-13034,CVE-2017-13039,CVE-2017-13038,CVE-2017-11541,CVE-2017-11543,CVE-2017-11542,CVE-2017-13687,CVE-2017-13725,CVE-2017-13688,CVE-2017-13689,CVE-2017-13046,CVE-2017-13047,CVE-2017-13044,CVE-2017-13045,CVE-2017-13042,CVE-2017-13043,CVE-2017-13040,CVE-2017-13041,CVE-2017-13048,CVE-2017-13049,CVE-2017-12997,CVE-2017-13025,CVE-2017-13026,CVE-2017-12994,CVE-2017-13020,CVE-2017-12992,CVE-2017-13690,CVE-2017-12991,CVE-2017-13023,CVE-2017-13055,CVE-2017-13054,CVE-2017-13051,CVE-2017-13050,CVE-2017-13053,CVE-2017-13052,CVE-2017-12893,CVE-2017-12896,CVE-2017-12897,CVE-2017-12894,CVE-2017-12895,CVE-2017-12898,CVE-2017-12899,CVE-2017-13019,CVE-2017-12989,CVE-2017-12985,CVE-2017-12986,CVE-2017-12987,CVE-2017-13008,CVE-2017-13009,CVE-2017-13002,CVE-2017-13003,CVE-2017-13000,CVE-2017-13001,CVE-2017-13006,CVE-2017-13004,CVE-2017-13005,CVE-2017-12900,CVE-2017-12901,CVE-2017-12902,CVE-2017-12988,CVE-2017-13018,CVE-2017-13011,CVE-2017-13010,CVE-2017-13013,CVE-2017-13012,CVE-2017-13015,CVE-2017-13014,CVE-2017-13017,CVE-2017-13016",App3,$300000,1,9.8,0.85,1,0.8,6.664000000000001,6.664000000000001,IBM,AIX 6.1,IBM AIX tcpdump Multiple Vulnerabilities (tcpdump_advisory3),"The vendor has released fixes to resolve this vulnerability. Refer to AIX tcpdump_advisory3 (http://aix.software.ibm.com/aix/efixes/security/tcpdump_advisory3.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  tcpdump_advisory3: AIX 5.3, 6.1, 7.1, 7.2 (tcpdump) (https://aix.software.ibm.com/aix/efixes/security/tcpdump_fix2.tar )","AIX is prone to the following vulnerabilities:
 
tcpdump is vulnerable to multiple buffer overflow vulnerabilities caused by improper bounds checking by the parser.
 
Affected Platforms: 
AIX 5.3, 6.1, 7.1, 7.2
 Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results. APAR versions:
 IV94728mAa,IV94727m9a,IV94726m5a,IV94724m5a,IV94723m3a,IV94729m9a",Exploitation might allow a remote attacker to cause the application to crash.
"CVE-2017-3514,CVE-2017-3512,CVE-2017-3511,CVE-2017-3509,CVE-2017-3544,CVE-2017-3533,CVE-2017-3539,CVE-2017-1289,CVE-2016-9840,CVE-2016-9841,CVE-2016-9842,CVE-2016-9843",App3,$300000,1,9.8,0.85,1,0.8,6.664000000000001,6.664000000000001,IBM,AIX 6.1,IBM AIX Java Multiple Vulnerabilities (java_apr2017_advisory),"The vendor has released fixes to resolve this vulnerability. Refer to AIX java_apr2017_advisory (http://aix.software.ibm.com/aix/efixes/security/java_apr2017_advisory.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  java_apr2017_advisory (IBM SDK Version 6 ) (https://www-945.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~WebSphere&product=ibm/IBM+SDKs+for+Java+Technology/Java+Standard+Edition+%28Java+SE%29&release=6.0.0.0&platform=AIX+32-bit,+pSeries&function=all)  java_apr2017_advisory (IBM SDK Version 7) (https://www-945.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~WebSphere&product=ibm/IBM+SDKs+for+Java+Technology/Java+Standard+Edition+%28Java+SE%29&release=7.0.0.0&platform=AIX+32-bit,+pSeries&function=all )  java_apr2017_advisory (IBM SDK Version 7R1) (https://www-945.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~WebSphere&product=ibm/IBM+SDKs+for+Java+Technology/Java+Standard+Edition+%28Java+SE%29&release=7.1.0.0&platform=AIX+32-bit,+pSeries&function=all)  java_apr2017_advisory (IBM SDK Version 8) (https://www-945.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~WebSphere&product=ibm/IBM+SDKs+for+Java+Technology/Java+Standard+Edition+%28Java+SE%29&release=8.0.0.0&platform=AIX+32-bit,+pSeries&function=all)","There are multiple vulnerabilities in IBM SDK Java Technology Edition Versions 6, 7, 7.1, 8 that are used by AIX. These issues were disclosed as part of the IBM Java SDK updates in January 2017.
The following vulnerabilities exists in IBM AIX:-  
1. An unspecified vulnerability in Oracle Java SE related to the Java 
SE AWT component could allow an unauthenticated attacker to take control of the 
system. (CVE-2017-3514)  
2. An unspecified vulnerability in Oracle Java SE related to the 
Java SE AWT component could allow an unauthenticated attacker to take control 
of the system.(CVE-2017-3512)  
3. An unspecified vulnerability in Oracle Java SE related to the Java SE, 
Java SE Embedded, JRockit JCE component could allow an unauthenticated attacker to 
take control of the system. (CVE-2017-3511)  
4.  An unspecified vulnerability in Oracle Java SE related to the Java SE, 
Java SE Embedded Networking component could allow an unauthenticated attacker to 
cause low confidentiality impact, low integrity impact, and no availability impact. (CVE-2017-3509)  
5. An unspecified vulnerability in Oracle Java SE related to the Java SE, 
Java SE Embedded, JRockit Networking component could allow an unauthenticated 
attacker to cause no confidentiality impact, low integrity impact, and no availability 
impact.(CVE-2017-3544)  
6. An unspecified vulnerability in Oracle Java SE related to the Java SE, 
Java SE Embedded, JRockit Networking component could allow an unauthenticated 
attacker to cause no confidentiality impact, low integrity impact, and no availability 
impact.(CVE-2017-3533)  
7. An unspecified vulnerability in Oracle Java SE related to the Java SE, 
Java SE Embedded Security component could allow an unauthenticated attacker to cause 
no confidentiality impact, low integrity impact, and no availability impact. (CVE-2017-3539)  
8. IBM SDK, Java Technology Edition is vulnerable XML External Entity Injection 
(XXE) error when processing XML data. A remote attacker could exploit this vulnerability to 
expose highly sensitive information or consume memory resources. (CVE-2017-1289)  
9. zlib is vulnerable to a denial of service, caused by an out-of-bounds pointer 
arithmetic in inftrees.c. By persuading a victim to open a specially crafted document, a 
remote attacker could exploit this vulnerability to cause a denial of service.(CVE-2016-9840 - CVE-2016-9843)

Affected Versions:-  
AIX 5.3, 6.1, 7.1, 7.2","Successful exploitation allows remote attackers to affect confidentiality, integrity, and availability impact."
"CVE-2016-3598,CVE-2016-3511,CVE-2016-3485",App3,$300000,1,9.6,0.85,1,0.8,6.5280000000000005,6.5280000000000005,IBM,AIX 6.1,IBM AIX Java Denial of Service Vulnerability,"The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory (http://aix.software.ibm.com/aix/efixes/security/java_july2016_advisory.asc) to obtain more information
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  java_july2016_advisory: AIX 5.3, 6.1, 7.1, 7.2 (https://www-933.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~WebSphere&product=ibm/IBM+SDKs+for+Java+Technology/Java+Standard+Edition+%28Java+SE%29&release=6.0.0.0&platform=AIX+32-bit,+pSeries&function=all)","There are multiple vulnerabilities in IBM SDK Java Technology Edition, Versions 6, 7, 7.1, 8 that are used by AIX.  
AIX is prone to the following vulnerabilities:  
 An unspecified vulnerability in Oracle Java SE and Java SE Embedded related to the Libraries component has high confidentiality impact, high integrity impact, and high availability impact.
 An unspecified vulnerability in Oracle Java SE related to the Deployment component has high confidentiality impact, high integrity impact, and high availability impact.
 An unspecified vulnerability in Oracle Java SE and Java SE Embedded related to the Networking component has no confidentiality impact, low integrity impact, and no availability impact.
 Affected Platforms: AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2
 Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.","Successful exploitation allows remote attackers to cause a denial of service via a malformed packet to the rndc (aka control channel) interface, related to alist.c and sexpr.c."
"CVE-2016-5552,CVE-2017-3231,CVE-2017-3241,CVE-2017-3253,CVE-2017-3259,CVE-2017-3261,CVE-2017-3272,CVE-2016-2183,CVE-2016-5548,CVE-2016-5549,CVE-2017-3252,CVE-2017-3289,CVE-2016-5547,CVE-2016-5546",App3,$300000,1,9.6,0.85,1,0.8,6.5280000000000005,6.5280000000000005,IBM,AIX 6.1,IBM AIX Java Multiple Vulnerabilities (java_jan2017_advisory),"The vendor has released fixes to resolve this vulnerability. Refer to AIX java_jan2017_advisory (http://aix.software.ibm.com/aix/efixes/security/java_jan2017_advisory.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  java_jan2017_advisory: AIX 5.3, 6.1, 7.1 and 7.2 (https://www-933.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~WebSphere&product=ibm/IBM+SDKs+for+Java+Technology/Java+Standard+Edition+%28Java+SE%29&release=8.0.0.0&platform=AIX+32-bit,+pSeries&function=all)","There are multiple vulnerabilities in IBM SDK Java Technology Edition Versions 6, 7, 7.1, 8 that are used by AIX. These issues were disclosed as part of the IBM Java SDK updates in October 2016.
The following vulnerabilities exists in IBM AIX:-  
1. An unspecified vulnerability in Oracle Java SE and Java SE Embedded 
related to the Hotspot component has high confidentiality impact, high integrity
impact, and high availability impact. (CVE-2017-3289)  
2. An unspecified vulnerability in Oracle Java SE and Java SE Embedded
related to the Libraries component has high confidentiality impact, high 
integrity impact, and high availability impact.(CVE-2017-3272)  
3.An unspecified vulnerability in Oracle Java SE Java SE Embedded
and Jrockit related to the RMI component has high confidentiality impact, high
integrity impact, and high availability impact. (CVE-2017-3241)  
4.  An unspecified vulnerability in Oracle Java SE Java SE Embedded and
Jrockit related to the 2D component could allow a remote attacker to cause a 
denial of service resulting in a high availability impact using unknown attack vectors. (CVE-2017-3253)  
5. An unspecified vulnerability in Oracle Java SE Java SE Embedded and 
Jrockit related to the Libraries component has no confidentiality impact, high 
integrity impact, and no availability impact. (CVE-2016-5546)  
6. An unspecified vulnerability in Oracle Java SE and Java SE Embedded
related to the Libraries component could allow a remote attacker to obtain
sensitive information resulting in a high confidentiality impact using unknown 
attack vectors. (CVE-2016-5548)  
7. An unspecified vulnerability in Oracle Java SE and Java SE Embedded
related to the Libraries component could allow a remote attacker to obtain sensitive 
information resulting in a high confidentiality impact using unknown attack vectors.  (CVE-2016-5549)  
8. An unspecified vulnerability in Oracle Java SE Java SE Embedded
and Jrockit related to the JAAS component has no confidentiality impact, 
high integrity impact, and no availability impact. (CVE-2017-3252)  
9. An unspecified vulnerability in Oracle Java SE Java SE Embedded 
and Jrockit related to the Libraries component could allow a remote attacker
to cause a denial of service resulting in a low availability impact using unknown attack vectors.(CVE-2017-5547)

Affected Versions:-  
AIX 5.3, 6.1, 7.1, 7.2","Successful exploitation allows remote attackers to affect confidentiality, integrity, and availability impact."
"CVE-2016-5568,CVE-2016-5556,CVE-2016-5573,CVE-2016-5597,CVE-2016-5554,CVE-2016-5542",App3,$300000,1,9.6,0.85,1,0.8,6.5280000000000005,6.5280000000000005,IBM,AIX 6.1,IBM AIX Java Multiple Vulnerabilities (java_oct2016_advisory),"The vendor has released fixes to resolve this vulnerability. Refer to AIX java_oct2016_advisory (https://aix.software.ibm.com/aix/efixes/security/java_oct2016_advisory.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  java_oct2016_advisory: AIX 5.3, 6.1, 7.1 and 7.2 (Java) (https://www-933.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~WebSphere&product=ibm/IBM+SDKs+for+Java+Technology/Java+Standard+Edition+%28Java+SE%29&release=6.0.0.0&platform=AIX+32-bit,+pSeries&function=all)","There are multiple vulnerabilities in IBM SDK Java Technology Edition Versions 6, 7, 7.1, 8 that are used by AIX. These issues were disclosed as part of the IBM Java SDK updates in October 2016.
The following vulnerabilities exists in IBM AIX:-  
1. An unspecified vulnerability in Oracle Java SE and Java SE 
    Embedded related to the Hotspot component has high confidentiality impact, 
    high integrity impact, and high availability impact. (CVE-2016-5582)  
2. An unspecified vulnerability in Oracle Java SE related to the
    AWT component has high confidentiality impact, high integrity impact, and
    high availability impact. (CVE-2016-5568)  
3.An unspecified vulnerability in Oracle Java SE related to the
    2D component has high confidentiality impact, high integrity impact, and high
    availability impact. (CVE-2016-5556)  
4.  An unspecified vulnerability in Oracle Java SE and Java SE 
    Embedded related to the Hotspot component has high confidentiality impact, 
    high integrity impact, and high availability impact. (CVE-2016-5573)  
5. An unspecified vulnerability in Oracle Java SE and Java SE
    Embedded related to the Networking component could allow a remote attacker 
    to obtain sensitive information resulting in a high confidentiality impact 
    using unknown attack vectors. (CVE-2016-5597)  
6. An unspecified vulnerability in Oracle Java SE and Java SE 
    Embedded related to the JMX component has no confidentiality impact, low 
    integrity impact, and no availability impact. (CVE-2016-5554)  
7. An unspecified vulnerability in Oracle Java SE and Java SE
    Embedded related to the Libraries component has no confidentiality impact, 
    low integrity impact, and no availability impact.  (CVE-2016-5542)  
Affected Versions:-  
AIX 5.3, 6.1, 7.1, 7.2","Successful exploitation allows remote attackers to affect confidentiality, integrity, and availability impact."
CVE-2021-45046,App10,$15000,1,9,0.85,1,0.8,6.12,6.12,Apache,AIX 6.1,Apache Log4j Remote Code Execution (RCE) Vulnerability (CVE-2021-45046) (Log4Shell),"Apache recommends customers to upgrade to Log4j 2.3.1 (for Java 6), 2.12.3 (for Java 7), or 2.17.0 (for Java 8 and later). Please refer to the mitigations mentioned here Log4j (https://logging.apache.org/log4j/2.x/security.html). 
This detection checks only version information and does not check for workaround. 
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  Apache Log4j (https://logging.apache.org/log4j/2.x/security.html)","Apache Log4j is a Java-based logging utility. It is part of the Apache Logging Services, a project of the Apache Software Foundation.

CVE-2021-45046: A zero-day exploit affecting the popular Apache Log4j utility to Remote Code Execution and Denial of Service attack.

Affected versions: 
Log4j versions from 2.x prior to 2.12.2 
Log4j versions 2.13.0 prior to and including 2.15.0

QID Detection: (Authenticated) - Linux 
This detection is based on querying the OS package managers on the target. If the target has a log4j package with an affected version, the target is flagged as vulnerable.
This detection logic is updated to find log4j installs using the locate command and ls proc command.

QID Detection: (Authenticated) - Windows 
On Windows system, the QID identifies vulnerable instance of log4j via WMI to check log4j included in the running processes via command-line.
 
 
 Note: QID leverages the OS package manager to identify vulnerable Log4j packages. If the target does not have the vulnerable log4j package installed via the package manager, this QID might not get detected. This would typically happen when an application bundles the Log4j library in a jar etc.  
This detection checks only version information and does not check for workaround.",Successful exploitation of this vulnerability could lead to Sensitive Information Disclosure and Remote Code Execution
CVE-2021-45046,App2,$500000,1,9,0.85,1,0.8,6.12,6.12,Apache,AIX 6.1,Apache Log4j Remote Code Execution (RCE) Vulnerability (CVE-2021-45046) (Log4Shell),"Apache recommends customers to upgrade to Log4j 2.3.1 (for Java 6), 2.12.3 (for Java 7), or 2.17.0 (for Java 8 and later). Please refer to the mitigations mentioned here Log4j (https://logging.apache.org/log4j/2.x/security.html). 
This detection checks only version information and does not check for workaround. 
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  Apache Log4j (https://logging.apache.org/log4j/2.x/security.html)","Apache Log4j is a Java-based logging utility. It is part of the Apache Logging Services, a project of the Apache Software Foundation.

CVE-2021-45046: A zero-day exploit affecting the popular Apache Log4j utility to Remote Code Execution and Denial of Service attack.

Affected versions: 
Log4j versions from 2.x prior to 2.12.2 
Log4j versions 2.13.0 prior to and including 2.15.0

QID Detection: (Authenticated) - Linux 
This detection is based on querying the OS package managers on the target. If the target has a log4j package with an affected version, the target is flagged as vulnerable.
This detection logic is updated to find log4j installs using the locate command and ls proc command.

QID Detection: (Authenticated) - Windows 
On Windows system, the QID identifies vulnerable instance of log4j via WMI to check log4j included in the running processes via command-line.
 
 
 Note: QID leverages the OS package manager to identify vulnerable Log4j packages. If the target does not have the vulnerable log4j package installed via the package manager, this QID might not get detected. This would typically happen when an application bundles the Log4j library in a jar etc.  
This detection checks only version information and does not check for workaround.",Successful exploitation of this vulnerability could lead to Sensitive Information Disclosure and Remote Code Execution
CVE-2021-45046,App3,$300000,1,9,0.85,1,0.8,6.12,6.12,Apache,AIX 6.1,Apache Log4j Remote Code Execution (RCE) Vulnerability (CVE-2021-45046) (Log4Shell),"Apache recommends customers to upgrade to Log4j 2.3.1 (for Java 6), 2.12.3 (for Java 7), or 2.17.0 (for Java 8 and later). Please refer to the mitigations mentioned here Log4j (https://logging.apache.org/log4j/2.x/security.html). 
This detection checks only version information and does not check for workaround. 
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  Apache Log4j (https://logging.apache.org/log4j/2.x/security.html)","Apache Log4j is a Java-based logging utility. It is part of the Apache Logging Services, a project of the Apache Software Foundation.

CVE-2021-45046: A zero-day exploit affecting the popular Apache Log4j utility to Remote Code Execution and Denial of Service attack.

Affected versions: 
Log4j versions from 2.x prior to 2.12.2 
Log4j versions 2.13.0 prior to and including 2.15.0

QID Detection: (Authenticated) - Linux 
This detection is based on querying the OS package managers on the target. If the target has a log4j package with an affected version, the target is flagged as vulnerable.
This detection logic is updated to find log4j installs using the locate command and ls proc command.

QID Detection: (Authenticated) - Windows 
On Windows system, the QID identifies vulnerable instance of log4j via WMI to check log4j included in the running processes via command-line.
 
 
 Note: QID leverages the OS package manager to identify vulnerable Log4j packages. If the target does not have the vulnerable log4j package installed via the package manager, this QID might not get detected. This would typically happen when an application bundles the Log4j library in a jar etc.  
This detection checks only version information and does not check for workaround.",Successful exploitation of this vulnerability could lead to Sensitive Information Disclosure and Remote Code Execution
"CVE-2017-6451,CVE-2017-6458,CVE-2017-6462,CVE-2017-6464",App3,$300000,1,8.8,0.85,1,0.8,5.984000000000001,5.984000000000001,IBM,AIX 6.1,IBM AIX NTP Multiple Vulnerabilities (ntp_advisory9.asc),"The vendor has released fixes to resolve this vulnerability. Refer to AIX NTP Advisory (http://aix.software.ibm.com/aix/efixes/security/ntp_advisory9.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  ntp_advisory9: AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2 (https://aix.software.ibm.com/aix/efixes/security/ntp_fix9.tar)","There are multiple vulnerabilities in NTPv3 and NTPv4 that impact AIX.   
Affected Platforms: 
AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2

APAR versions: 
IV96305, IV96306, IV96307, IV96308, IV96309, IV96310, IV96311, IV96312

Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.","By sending an overly long string argument, a remote authenticated attacker could exploit this vulnerability to overflow a buffer and cause the application to crash."
"CVE-2016-1286,CVE-2016-1285",App3,$300000,1,8.6,0.85,1,0.8,5.848,5.848,IBM,AIX 6.1,IBM AIX BIND Denial of Service Vulnerability,"The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory (http://aix.software.ibm.com/aix/efixes/security/bind_advisory12.asc) to obtain more information
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  IBM AIX BIND Denial of Service Vulnerability: AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2 (ftp://aix.software.ibm.com/aix/efixes/security/bind_fix12.tar)","AIX is prone to the following vulnerabilities:

ISC BIND is vulnerable to a denial of service, caused by the improper handling of control channel input. By sending a specially crafted packet, a remote attacker could exploit this vulnerability to trigger an assertion failure in sexpr.c or alist.c and cause the named process to crash. 
 ISC BIND is vulnerable to a denial of service, caused by an error when parsing signature records for DNAME resource records. A remote attacker could exploit this vulnerability to trigger an assertion failure in resolver.c or db.c and cause the named process to crash.
 Affected Platforms: AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2
 Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.  APAR versions: IV85298m9a,IV84456s5b,IV84984m5a,IV84456s6a,IV84984m6a,IV84456s7a,IV84984s7a,IV84457s6a,IV85296m6a,IV84458s1a,IV84947m1a,IV84458s2a,IV85296s2a,IV84457s5a,IV85296m5a,IV84459s1a,IV85297m1a,IV84459s2a,IV85297s2a",Exploitation could result in a denial of service condition.
"CVE-2015-6563,CVE-2016-0777,CVE-2016-0778,CVE-2015-6564",App3,$300000,1,8.1,0.85,1,0.8,5.508,5.508,IBM,AIX 6.1,IBM AIX OpenSSH Multiple Vulnerabilities,"The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory (http://aix.software.ibm.com/aix/efixes/security/openssh_advisory7.asc) to obtain more information
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  IBM AIX OpenSSH Multiple Vulnerabilities: AIX 5.3, 6.1, 7.1, 7.2 (https://www14.software.ibm.com/webapp/iwm/web/preLogin.do?source=aixbp)","AIX is prone to the following vulnerabilities: OpenSSH could allow a remote attacker to obtain sensitive 
        information, caused by a client information leak from using the roaming
        connection feature. By persuading a victim to connect to a malicious 
        server, an attacker could exploit this vulnerability to retrieve 
        private cryptographic keys or other sensitive information.
 
OpenSSH is vulnerable to a heap-based buffer overflow, caused 
        by improper bounds checking by the packet_write_wait() and 
        ssh_packet_write_wait() API functions when two non-default options: a 
        ProxyCommand and either ForwardAgent or ForwardX11are used. By 
        persuading a victim to connect to a malicious server, a remote attacker
        could overflow a buffer and execute arbitrary code on the system or 
        cause the application to crash.
 Affected Platforms: AIX 5.3, 6.1, 7.1 and 7.2 are affected
 Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.  APAR versions: IV80743",Exploitation could allow an attacker to execute arbitrary code or cause a denial of service.
"CVE-2015-8325,CVE-2016-6210,CVE-2016-6515",App3,$300000,1,7.8,0.85,1,0.8,5.304,5.304,IBM,AIX 6.1,IBM AIX OpenSSH Multiple Vulnerabilities (openssh_advisory9),"The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory openssh_advisory9 (http://aix.software.ibm.com/aix/efixes/security/openssh_advisory9.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  openssh_advisory9: AIX 5.3, 6.1, 7.1, 7.2 (http://aix.software.ibm.com/aix/efixes/security/openssh_fix9.tar)","IBM AIX is prone to the following vulnerabilities:
 
When the UseLogin feature is enabled and PAM is configured to 
        read .pam_environment files in user home directories, allows local users 
        to gain privileges by triggering a crafted environment for the /bin/login 
        program, as demonstrated by an LD_PRELOAD environment variable.
 
An attacker can measure timing differences in password 
    authentication that could be used to discern valid from invalid account 
    names when long passwords were sent and particular password hashing
       algorithms are in use on the server 
 
sshd does not limit password lengths for password authentication, 
        which allows remote attackers to cause a denial of service 
        (crypt CPU consumption) via a long string.  
 
Affected Platforms: 
AIX 5.3, 6.1, 7.1 and 7.2
 
Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.",Exploitation could allow a remote attacker to execute arbitrary code.
CVE-2016-6079,App3,$300000,1,7.8,0.85,1,0.8,5.304,5.304,IBM,AIX 6.1,IBM AIX lquerylv Privilege Escalation Vulnerability (lquerylv_advisory.asc),"The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory lquerylv_advisory.asc (http://aix.software.ibm.com/aix/efixes/security/lquerylv_advisory.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  lquerylv_advisory.asc: AIX 5.3, 6.1, 7.1 and 7.2 (http://aix.software.ibm.com/aix/efixes/security/lquerylv_fix.tar)","AIX contains an unspecified vulnerability in lquerylv in LVM that impacts AIX.   
Affected Versions:-  
AIX 5.3, 6.1, 7.1, 7.2  
 
Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results. 
 
APAR versions: 
IV88658s9a, IV88658, IV87981s7a,IV87981s7a,IV87981s7a, IV87981, IV88419s7a,IV88419s7a,IV88419s7a,IV87640s2a,IV87640s2a,IV87640s2a, IV88419,IV87640, IV88053s2a,IV88053s2a,IV88053s2a,IV88053",The vulnerability could allow a locally authenticated user to obtain root level privileges.
"CVE-2016-8858,CVE-2016-10009,CVE-2016-10011,CVE-2016-10012",App3,$300000,1,7.8,0.85,1,0.8,5.304,5.304,IBM,AIX 6.1,IBM AIX OpenSSH Multiple Vulnerabilities (openssh_advisory10),"The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory openssh_advisory10 (http://aix.software.ibm.com/aix/efixes/security/openssh_advisory10.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  AIX Advisory openssh_advisory10: AIX 5.3, 6.1, 7.1 and 7.2 (OpenSSH) (https://www14.software.ibm.com/webapp/iwm/web/reg/download.do?source=aixbp&lang=en_US&S_PKG=openssh&cp=UTF-8)","IBM AIX is prone to the following vulnerabilities:
 
OpenSSH is vulnerable to a denial of service, caused by an
    error in the kex_input_kexinit() function. By sending specially crafted data
    during the key exchange process, a remote attacker could exploit this
    vulnerability to consume all available memory resources. (CVE-2016-8858)
 
OpenSSH could allow a remote authenticated attacker to execute
     arbitrary code on the system, caused by the loading of a specially crafted
     PKCS#11 module across a forwarded agent channel. An attacker could exploit 
     this vulnerability to write files or execute arbitrary code on the system. (CVE-2016-10009)
 
OpenSSH could allow a local authenticated attacker to obtain
    sensitive information, caused by a privilege separation flaw. An attacker 
    could exploit this vulnerability to obtain host private key material and 
    other sensitive information. (CVE-2016-10011)
 
OpenSSH could allow a local attacker to gain elevated privileges
    on the system, caused by improper bounds checking in the shared memory
    manager. An attacker could exploit this vulnerability to gain elevated 
    privileges on the system. (CVE-2016-10012)
 
Affected Platforms: 
AIX 5.3, 6.1, 7.1 and 7.2
 
Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results. 
APAR versions:
6203_ifix.",Successful exploitation could result in Denial of Service Vulnerability.
CVE-2016-8972,App3,$300000,1,7.8,0.85,1,0.8,5.304,5.304,IBM,AIX 6.1,IBM AIX bellmail Privilege Escalation Vulnerability (bellmail_advisory),"The vendor has released fixes to resolve this vulnerability. Refer to AIX bellmail_advisory (https://aix.software.ibm.com/aix/efixes/security/bellmail_advisory.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  AIX bellmail_advisory: AIX 6.1, 7.1, 7.2 (http://aix.software.ibm.com/aix/efixes/security/bellmail_fix.tar)","IBM AIX is prone to a privilege escalation vulnerability.  
IBM AIX could allow a local user to gain root privileges using a specially crafted command within the bellmail client.
  Affected Versions:-  
AIX 6.1, 7.1, 7.2 
 
Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.
 
APAR versions: 
IV91006s8a, IV91006, IV91007s7a, IV91008s3a, IV91007, IV91008, IV91010s2a, IV91011s1a, IV91010, IV91011",IBM AIX could allow a local user to gain root privileges using a specially crafted command within the bellmail client.
CVE-2017-1093,App3,$300000,1,7.8,0.85,1,0.8,5.304,5.304,IBM,AIX 6.1,IBM AIX bellmail Privilege Escalation Vulnerability (bellmail_advisory2),"The vendor has released fixes to resolve this vulnerability. Refer to AIX bellmail_advisory2 (http://aix.software.ibm.com/aix/efixes/security/bellmail_advisory2.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  AIX bellmail_advisory2: AIX 6.1, 7.1, 7.2 (https://aix.software.ibm.com/aix/efixes/security/bellmail_advisory2.asc.sig)","IBM AIX is prone to a privilege escalation vulnerability.  
IBM AIX could allow a local user to gain root privileges using a specially crafted command within the bellmail client.
  Affected Versions:-  
AIX 6.1, 7.1, 7.2 
 
Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.
 
APAR versions: 
IV92238m8a,IV92238m8a,IV92238m8a,IV92250m71,IV92250m71,IV92250m71,IV92240m3a,IV92240m3a,IV92240m3a,IV92241m2a,IV92241m2a,IV92241m2a,IV92242m1a,IV92242m1a,IV92241,IV92242, IV92250,IV92240,IV92238",IBM AIX could allow a local user to exploit a vulnerability in the bellmail binary to gain root privileges.
CVE-2017-1692,App3,$300000,1,7.8,0.85,1,0.8,5.304,5.304,IBM,AIX 6.1,"IBM AIX ""suid"" Privilege Escalation Vulnerability (suid_advisory)","The vendor has released fixes to resolve this vulnerability. Refer to AIX suid_advisory (http://aix.software.ibm.com/aix/efixes/security/suid_advisory.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  suid_advisory (https://aix.software.ibm.com/aix/efixes/security/suid_advisory.asc)","IBM AIX contains an unspecified vulnerability that would allow a locally authenticated user to obtain root level privileges. (CVE-2017-1692)  
A local user can exploit an unspecified flaw in bellmail, caccelstat, iostat, lquerypv, restbyinode, and vmstat to obtain root level privileges on the target system.
  Affected Versions:  
AIX 5.3,6.1, 7.1, 7.2 
 
Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.

QID Detection Logic (Authenticated): 
The detection checks for installed packages version via command : - ""lslpp -L"".  
It also checks for interim fixes installed using the command ""emgr -c"". 
The detection posts vulnerable if installed package version is less than patched version and interim fixes are also not installed.",A local user can obtain root privileges on the target system.
"CVE-2015-7974,CVE-2016-1550,CVE-2016-1551,CVE-2016-2517,CVE-2016-2518,CVE-2016-2519,CVE-2016-1547,CVE-2016-4957,CVE-2016-4953,CVE-2016-4954,CVE-2016-4955",App3,$300000,1,7.7,0.85,1,0.8,5.236000000000001,5.236000000000001,IBM,AIX 6.1,IBM AIX NTP Multiple Vulnerabilities (ntp_advisory7.asc),"The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory (http://aix.software.ibm.com/aix/efixes/security/ntp_advisory7.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  ntp_advisory7.asc: AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2 (ftp://aix.software.ibm.com/aix/efixes/security/ntp_fix7.tar)","There are multiple vulnerabilities in NTPv3 and NTPv4 that impact AIX.   
Affected Platforms: 
AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2

APAR versions: 
IV87614, IV87419, IV87615, IV87420, IV87939, IV87278, IV87279

Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.","The most severe of the vulnerabilities could allow denial of service. By sending spoofed CRYPTO_NAK or a bad MAC packets with correct origin timestamps, a remote attacker could exploit this vulnerability to cause the autokey association to reset."
"CVE-2015-3194,CVE-2015-3195,CVE-2015-3196",App3,$300000,1,7.5,0.85,1,0.8,5.1000000000000005,5.1000000000000005,IBM,AIX 6.1,IBM AIX OpenSSL Multiple Vulnerabilities,"The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory (http://aix.software.ibm.com/aix/efixes/security/openssl_advisory15.asc) to obtain more information
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  IBM AIX OpenSSL Advisory: AIX 5.3, 6.1, 7.1, 7.2 (https://www14.software.ibm.com/webapp/iwm/web/preLogin.do?source=aixbp)","AIX is prone to the following vulnerabilities: 
- OpenSSL allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an RSA PSS ASN.1 signature that lacks a mask generation function parameter.
 
- The ASN1_TFLG_COMBINE implementation in OpenSSL mishandles 
        errors caused by malformed X509_ATTRIBUTE data, which allows remote 
        attackers to obtain sensitive information from process memory by 
        triggering a decoding failure in a PKCS#7 or CMS application.
 
- OpenSSL when used for a multi-threaded client, writes the 
        PSK identity hint to an incorrect data structure, which allows remote
        servers to cause a denial of service (race condition and double free)
        via a crafted ServerKeyExchange message.

Affected Platforms: AIX 5.3, 6.1, 7.1, 7.2 are affected
 Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.",Exploitation could allow an attacker to cause a denial of service or remotely execute code.
"CVE-2015-7973,CVE-2015-7977,CVE-2015-7979,CVE-2015-8139,CVE-2015-8140,CVE-2015-8158",App3,$300000,1,7.5,0.85,1,0.8,5.1000000000000005,5.1000000000000005,IBM,AIX 6.1,IBM AIX NTP Multiple Vulnerabilities,"The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory (http://aix.software.ibm.com/aix/efixes/security/ntp_advisory6.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  IBM AIX NTP Multiple Vulnerabilities: AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2 (ftp://aix.software.ibm.com/aix/efixes/security/ntp_fix6.tar)","AIX is prone to the following vulnerabilities:  
 NTP could allow a remote attacker to launch a replay attack. An attacker could exploit this vulnerability using authenticated broadcast mode packets to conduct a replay attack and gain unauthorized access to the system. 
 NTP is vulnerable to a denial of service, caused by a NULL pointer dereference. By sending a specially crafted ntpdc reslist command, an attacker could exploit this vulnerability to cause a segmentation fault.  NTP could allow a remote attacker to bypass security restrictions. By sending specially crafted broadcast packets with bad authentication, an attacker could exploit this vulnerability to cause the target broadcast client to tear down the association with the broadcast server. 
 NTP could allow a remote attacker to obtain sensitive information, caused by an origin leak in ntpq and ntpdc. An attacker could exploit this vulnerability to obtain sensitive information 
 NTP could allow a remote attacker to launch a replay attack. An attacker could exploit this vulnerability using ntpq to conduct a replay attack and gain unauthorized access to the system information. 
 NTP is vulnerable to a denial of service, caused by the improper processing of incoming packets by ntpq. By sending specially crafted data, an attacker could exploit this vulnerability to cause the application to enter into an infinite loop. 
 
 Affected Platforms: 
AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2
 Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results. APAR versions: IV84269m9a,IV83984m4a,IV83984m5a,IV83984m6a,IV83992s5a,IV83984s7,IV83993m4b,IV83993m5a,IV83993m6a,IV83994m1a,IV83983s5a,IV83994s2,IV83995m0a,IV83995m1a,IV83983s5a",Exploitation could allow an attacker to launch a replay attack or cause a denial of service.
"CVE-2016-2775,CVE-2016-2776",App3,$300000,1,7.5,0.85,1,0.8,5.1000000000000005,5.1000000000000005,IBM,AIX 6.1,IBM AIX BIND Denial of Service Vulnerability (bind_advisory13),"The vendor has released fixes to resolve this vulnerability. Refer to AIX bind_advisory13 (http://aix.software.ibm.com/aix/efixes/security/bind_advisory13.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  bind_advisory13: AIX 5.3, 6.1, 7.1 and 7.2 (Bind) (https://aix.software.ibm.com/aix/efixes/security/bind_fix13.tar)","AIX is prone to the following vulnerabilities: 
 ISC BIND is vulnerable to a denial of service, caused by an assertion failure in buffer.c while a nameserver is building responses to a specifically constructed request.(CVE-2016-2776) 
ISC BIND is vulnerable to a denial of service, caused by an error when lwresd or the named lwres option is enabled.(CVE-2016-2775) 
Affected Platforms:
AIX 5.3, AIX 6.1, AIX 7.1, AIX 7.2
 
Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.
 
APAR versions: 
IV90056m9a,IV90056,IV89828m5a,IV89828m6a,IV89828m7a,IV89828,IV89830m5a,IV89830m6d,IV89830m7a,IV89829m1a,IV89829m1a,IV89829m2a,IV89830,IV89829,IV89831m1a,IV89831m1a,IV89831m2a,IV89831",Exploitation could result in a denial of service condition.
CVE-2016-8610,App3,$300000,1,7.5,0.85,1,0.8,5.1000000000000005,5.1000000000000005,IBM,AIX 6.1,IBM AIX OpenSSL Denial of Service Vulnerability (openssl_advisory22),"The vendor has released fixes to resolve this vulnerability. Refer to AIX openssl_advisory22 (http://aix.software.ibm.com/aix/efixes/security/openssl_advisory22.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  AIX openssl_advisory22: AIX 5.3, 6.1, 7.1 and 7.2 (OpenSSL) (https://aix.software.ibm.com/aix/efixes/security/openssl_fix22.tar)","IBM AIX SSL/TLS protocol is prone to a denial of service vulnerability. The vulnerability is caused by an error when processing ALERT packets during a SSL handshake.  
Note: This vulnerability is called ""SSL-Death-Alert"".
  Affected Versions:-  
AIX 5.3,6.1, 7.1, 7.2 
 
Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.
 
APAR versions: 
517_ifix, fips_ifix","By sending specially-crafted plain-text ALERT packets, a remote attacker could exploit this vulnerability to cause the application to stop responding."
"CVE-2016-8864,CVE-2016-2848",App3,$300000,1,7.5,0.85,1,0.8,5.1000000000000005,5.1000000000000005,IBM,AIX 6.1,IBM AIX BIND Denial of Service Vulnerability (bind_advisory14),"The vendor has released fixes to resolve this vulnerability. Refer to AIX bind_advisory14 (https://aix.software.ibm.com/aix/efixes/security/bind_advisory14.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  AIX bind_advisory14: AIX 6.1, 7.1 (Bind) (http://aix.software.ibm.com/aix/efixes/security/bind_fix14.tar)","There are two vulnerabilities in BIND that impact AIX.  
1. SC BIND is vulnerable to a denial of service, caused by the
    improper handling of responses containing a DNAME answer in db.c or
    resolver.c. By sending a recursive response, a remote attacker could 
    exploit this vulnerability to trigger an assertion failure. (CVE-2016-8864)  
2. ISC BIND is vulnerable to a denial of service. By sending a
    specially crafted DNS packet with malformed options, a remote attacker could 
    exploit this vulnerability to trigger an assertion failure.  (CVE-2016-2848)  
Affected Versions: -  
AIX 6.1, 7.1
 
Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.
 
APAR versions: 
IV91253m9b,IV91253,IV91254m6b,IV91254m7b,IV91254m8b,IV91254,IV91214m4b,IV91214m5b,IV91214m6a,IV91255m1b,IV91255m2a,IV91255m3c,IV91214,IV91255,IV91256m1b,IV91256m2b,IV91257m0a,IV91257m1a,IV91256,IV91257","Successful exploitation allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a DNAME record in the answer section of a response to a recursive query, related to db.c and resolver.c."
CVE-2016-9131,App3,$300000,1,7.5,0.85,1,0.8,5.1000000000000005,5.1000000000000005,IBM,AIX 6.1,IBM AIX BIND Denial of Service Vulnerability (bind_advisory15),"The vendor has released fixes to resolve this vulnerability. Refer to AIX bind_advisory15 (https://aix.software.ibm.com/aix/efixes/security/bind_advisory15.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  AIX bind_advisory15: AIX 5.3, 6.1, 7.1, 7.2 (Bind) (https://aix.software.ibm.com/aix/efixes/security/bind_fix15.tar)","ISC BIND is vulnerable to a denial of service, caused by the
    improper handling of responses during recursion. By sending a malformed 
    response to a RTYPE ANY query, a remote attacker could exploit this 
    vulnerability to trigger an assertion failure.
Affected Versions:  
AIX 5.3, 6.1, 7.1, 7.2
 
APAR versions: 
IV93403m3a,IV93403m3a,IV93403m3a,IV93365m1a,IV93365m1a,IV93362m8a,IV93362m8a,IV93362m8a,IV93363m3a,IV93363m3a,IV93363m3a,IV93361m8a,IV93361m8a,IV93361m8a,IV93366m9a 
 
Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.",Successful exploitation allows remote attackers to cause a denial of service (assertion failure).
CVE-2016-0266,App10,$30000,2,3.7,0.85,1,0.8,2.516,5.032,IBM,AIX 6.1,IBM AIX pconsole Information Disclosure Vulnerability (pconsole_advisory2.asc),"The vendor has released fixes to resolve this vulnerability. Refer to AIX pconsole_advisory2.asc (http://aix.software.ibm.com/aix/efixes/security/pconsole_advisory2.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  AIX pconsole_advisory2.asc: AIX 6.1, 7.1 (            https://aix.software.ibm.com/aix/efixes/security/pconsole_fix2.tar )","IBM AIX is prone to a remote information-disclosure vulnerability.
 IBM AIX 6.1 and 7.1 do not default to the latest TLS version, which makes it easier for man-in-the-middle attackers to obtain sensitive information via unspecified vectors.(CVE-2016-0266)
 
Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.
 
APAR versions: 
IV89737s2a, IV89737, IV89739s7a, IV89739",Remote attackers can exploit this issue to obtain sensitive information that may lead to further attacks.
CVE-2017-1541,App3,$300000,1,7.3,0.85,1,0.8,4.964,4.964,IBM,AIX 6.1,IBM AIX Java Multiple Vulnerabilities (java_july2017_advisory),"The vendor has released fixes to resolve this vulnerability. Refer to AIX Java6_advisory16 (http://aix.software.ibm.com/aix/efixes/security/java6_advisory.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  Java6_advisory (https://www-945.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~WebSphere&product=ibm/IBM+SDKs+for+Java+Technology/Java+Standard+Edition+%28Java+SE%29&release=6.0.0.0&platform=AIX+32-bit,+pSeries&function=all)","There is a vulnerability in the AIX IBM Java 6 SDK installp and updatep
 packages. 
A flaw in the AIX JRE/SDK installp and updatep packages 
        prevented the java.security, java.policy and javaws.policy files 
        from being updated correctly. 
Affected Versions:  
AIX 5.3, 6.1, 7.1, 7.2  
APAR versions:
J632SR16F3, J632SR16F4, J632SR16F5, J632SR16F7, J632S16F15, J632S16F20, J632S16F26, J632S16F30, J632S16F35, J632S16F41, J632S16F45

Note:The detection requires root privileges to run ""emgr -c"" or ""instfix -k"" to check for patches. In absence of such privileges, the detection may not output actual results.","Successful exploitation allows remote attackers to affect confidentiality, integrity, and availability impact."
CVE-2021-44832,App10,$15000,1,6.6,0.85,1,0.8,4.4879999999999995,4.4879999999999995,Apache,AIX 6.1,Apache Log4j Remote Code Execution (RCE) Vulnerability (CVE-2021-44832),"Apache recommends customers to upgrade to Log4j 2.3.2 (for Java 6), 2.12.4 (for Java 7), or 2.17.1 (for Java 8 and later). Please refer to the mitigations mentioned here Log4j (https://logging.apache.org/log4j/2.x/security.html). 
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  Apache Log4j (https://logging.apache.org/log4j/2.x/security.html)","Apache Log4j is a Java-based logging utility. It is part of the Apache Logging Services, a project of the Apache Software Foundation.

CVE-2021-44832: Apache Log4j2 vulnerable to RCE via JDBC Appender when attacker controls configuration.

Affected versions:

Apache Log4j2 versions 2.0-beta7 through 2.17.0 (excluding security fix releases 2.3.2 and 2.12.4)

QID Detection Logic: (Authenticated) - Linux 
This QID is executing the command ""rpm -qa |grep -i log4j"" and looking for string ""log4j-cve-2021-44228"" in the command output.

QID Detection: (Authenticated) - Windows 
On Windows system, the QID identifies vulnerable instance of log4j via WMI to check log4j included in the running processes via command-line.",Successful exploitation of this vulnerability could lead to Remote Code Execution
CVE-2021-44832,App2,$500000,1,6.6,0.85,1,0.8,4.4879999999999995,4.4879999999999995,Apache,AIX 6.1,Apache Log4j Remote Code Execution (RCE) Vulnerability (CVE-2021-44832),"Apache recommends customers to upgrade to Log4j 2.3.2 (for Java 6), 2.12.4 (for Java 7), or 2.17.1 (for Java 8 and later). Please refer to the mitigations mentioned here Log4j (https://logging.apache.org/log4j/2.x/security.html). 
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  Apache Log4j (https://logging.apache.org/log4j/2.x/security.html)","Apache Log4j is a Java-based logging utility. It is part of the Apache Logging Services, a project of the Apache Software Foundation.

CVE-2021-44832: Apache Log4j2 vulnerable to RCE via JDBC Appender when attacker controls configuration.

Affected versions:

Apache Log4j2 versions 2.0-beta7 through 2.17.0 (excluding security fix releases 2.3.2 and 2.12.4)

QID Detection Logic: (Authenticated) - Linux 
This QID is executing the command ""rpm -qa |grep -i log4j"" and looking for string ""log4j-cve-2021-44228"" in the command output.

QID Detection: (Authenticated) - Windows 
On Windows system, the QID identifies vulnerable instance of log4j via WMI to check log4j included in the running processes via command-line.",Successful exploitation of this vulnerability could lead to Remote Code Execution
CVE-2021-44832,App3,$300000,1,6.6,0.85,1,0.8,4.4879999999999995,4.4879999999999995,Apache,AIX 6.1,Apache Log4j Remote Code Execution (RCE) Vulnerability (CVE-2021-44832),"Apache recommends customers to upgrade to Log4j 2.3.2 (for Java 6), 2.12.4 (for Java 7), or 2.17.1 (for Java 8 and later). Please refer to the mitigations mentioned here Log4j (https://logging.apache.org/log4j/2.x/security.html). 
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  Apache Log4j (https://logging.apache.org/log4j/2.x/security.html)","Apache Log4j is a Java-based logging utility. It is part of the Apache Logging Services, a project of the Apache Software Foundation.

CVE-2021-44832: Apache Log4j2 vulnerable to RCE via JDBC Appender when attacker controls configuration.

Affected versions:

Apache Log4j2 versions 2.0-beta7 through 2.17.0 (excluding security fix releases 2.3.2 and 2.12.4)

QID Detection Logic: (Authenticated) - Linux 
This QID is executing the command ""rpm -qa |grep -i log4j"" and looking for string ""log4j-cve-2021-44228"" in the command output.

QID Detection: (Authenticated) - Windows 
On Windows system, the QID identifies vulnerable instance of log4j via WMI to check log4j included in the running processes via command-line.",Successful exploitation of this vulnerability could lead to Remote Code Execution
"CVE-2016-7427,CVE-2016-7428,CVE-2016-9310,CVE-2016-9311",App3,$300000,1,6.5,0.85,1,0.8,4.42,4.42,IBM,AIX 6.1,IBM AIX NTP Denial of Service Vulnerability (ntp_advisory8.asc),"The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory ntp_advisory8 (http://aix.software.ibm.com/aix/efixes/security/ntp_advisory8.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  AIX Advisory ntp_advisory8: AIX 6.1, 7.1, 7.2 (ntp) (https://aix.software.ibm.com/aix/efixes/security/ntp_fix8.tar)","There are multiple vulnerabilities in NTPv3 and NTPv4 that impact AIX.  
NTPv3 and NTPv4 are vulnerable to:  
1. A denial of service, caused by an error
    in broadcast mode replay prevention functionality. By sending specially 
    crafted NTP packets, a local attacker could exploit this vulnerability to 
    cause a denial of service. (CVE-2016-7427) 
2. A denial of service, caused by an error 
    in broadcast mode poll interval enforcement functionality. By sending 
    specially crafted NTP packets, a remote attacker from within the local 
    network could exploit this vulnerability to cause a denial of service.(CVE-2016-7428 )  
3. A denial of service, caused by an error 
    in the control mode (mode 6) functionality. By sending specially crafted 
    control mode packets, a remote attacker could exploit this vulnerability 
    to obtain sensitive information and cause the application to crash. (CVE-2016-9310) 
4. A denial of service, caused by a NULL 
    pointer dereference when trap service has been enabled. By sending specially 
    crafted packets, a remote attacker could exploit this vulnerability to cause
    the application to crash. (CVE-2016-9311)  
Affected Platforms: 
    AIX 6.1, AIX 7.1, AIX 7.2

APAR versions: 
IV91803,IV92287,IV91951,IV92126,IV92192

Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.",A remote attacker could exploit this vulnerability to obtain sensitive information and cause the application to crash.
CVE-2004-0230,App3,$900000,3,2,0.85,1,0.8,1.36,4.08,Others,AIX 6.1,TCP Sequence Number Approximation Based Denial of Service,"Please first check the results section below for the port number on which this vulnerability was detected. If that port number is known to be used for port-forwarding, then it is the backend host that is really vulnerable.
 
Various implementations and products including Check Point, Cisco, Cray Inc, Hitachi, Internet Initiative Japan, Inc (IIJ), Juniper Networks, NEC, Polycom, and Yamaha are currently undergoing review. Contact the vendors to obtain more information about affected products and fixes. NISCC Advisory 236929 - Vulnerability Issues in TCP (http://packetstormsecurity.org/0404-advisories/246929.html) details the vendor patch status as of the time of the advisory, and identifies resolutions and workarounds.
 
Refer to US-CERT Vulnerability Note VU#415294 (http://www.kb.cert.org/vuls/id/415294) and OSVDB Article 4030 (http://osvdb.org/4030) to obtain a list of vendors affected by this issue and a note on resolutions (if any) provided by the vendor.
 
For Microsoft: Refer to MS05-019 (https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-019) and MS06-064 (https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-064) for further details.
 
For SGI IRIX: Refer to SGI Security Advisory 20040905-01-P (ftp://patches.sgi.com/support/free/security/advisories/20040905-01-P.asc)
 
For SCO UnixWare 7.1.3 and 7.1.1: Refer to SCO Security Advisory SCOSA-2005.14 (ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.14/SCOSA-2005.14.txt)
 
For Solaris (Sun Microsystems): The vendor has acknowledged the vulnerability; however a patch is not available. Refer to Sun Microsystems, Inc. Information for VU#415294 (http://www.kb.cert.org/vuls/id/JARL-5YGQAJ) to obtain additional details. Also, refer to TA04-111A (http://www.us-cert.gov/cas/techalerts/TA04-111A.html) for detailed mitigating strategies against these attacks.
 
For NetBSD: Refer to NetBSD-SA2004-006 (ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-006.txt.asc)
 
For Cisco: Refer to cisco-sa-20040420-tcp-ios.shtml (http://www.cisco.com/warp/public/707/cisco-sa-20040420-tcp-ios.shtml).
 
For IBM : Refer to IBM-tcp-sequence-number-cve-2004-0230 (https://www.ibm.com/support/pages/tcp-sequence-number-approximation-based-denial-service-cve-2004-0230).
 
For Red Hat Linux: There is no fix available.

Workaround: The following BGP-specific workaround information has been provided.
 
For BGP implementations that support it, the TCP MD5 Signature Option should be enabled. Passwords that the MD5 checksum is applied to should be set to strong values and changed on a regular basis.
 
Secure BGP configuration instructions have been provided for Cisco and Juniper at these locations:
 
Secure Cisco IOS BGP Template (http://www.cymru.com/Documents/secure-bgp-template.html)
 
JUNOS Secure BGP Template (http://www.cymru.com/gillsr/documents/junos-bgp-template.pdf)","TCP provides stateful communications between hosts on a network. TCP sessions are established by a three-way handshake and use random 32-bit sequence and acknowledgement numbers to ensure the validity of traffic. A vulnerability was reported that may permit TCP sequence numbers to be more easily approximated by remote attackers. This issue affects products released by multiple vendors.  
 
The cause of the vulnerability is that affected implementations will accept TCP sequence numbers within a certain range, known as the acknowledgement range, of the expected sequence number for a packet in the session. This is determined by the TCP window size, which is negotiated during the three-way handshake for the session. Larger TCP window sizes may be set to allow for more throughput, but the larger the TCP window size, the more probable it is to guess a TCP sequence number that falls within an acceptable range. It was initially thought that guessing an acceptable sequence number was relatively difficult for most implementations given random distribution, making this type of attack impractical. However, some implementations may make it easier to successfully approximate an acceptable TCP sequence number, making these attacks possible with a number of protocols and implementations.
 
This is further compounded by the fact that some implementations may support the use of the TCP Window Scale Option, as described in RFC 1323, to extend the TCP window size to a maximum value of 1 billion.
 
This vulnerability will permit a remote attacker to inject a SYN or RST packet into the session, causing it to be reset and effectively allowing for denial of service attacks. An attacker would exploit this issue by sending a packet to a receiving implementation with an approximated sequence number and a forged source IP address and TCP port.
 
There are a few factors that may present viable target implementations, such as those which depend on long-lived TCP connections, those that have known or easily guessed IP address endpoints and those implementations with easily guessed TCP source ports. It has been noted that Border Gateway Protocol (BGP) is reported to be particularly vulnerable to this type of attack, due to the use of long-lived TCP sessions and the possibility that some implementations may use the TCP Window Scale Option. As a result, this issue is likely to affect a number of routing platforms.
 
Another factor to consider is the relative difficulty of injecting packets into TCP sessions, as a number of receiving implementations will reassemble packets in order, dropping any duplicates. This may make some implementations more resistant to attacks than others.
 
It should be noted that while a number of vendors have confirmed this issue in various products, investigations are ongoing and it is likely that many other vendors and products will turn out to be vulnerable as the issue is investigated further.",Successful exploitation of this issue could lead to denial of service attacks on the TCP based services of target hosts.
"CVE-2015-6563,CVE-2015-6564",App2,$1500000,3,2,0.85,1,0.8,1.36,4.08,IBM,AIX 6.1,"IBM AIX ""OpenSSH"" Local Privilege Escalation Vulnerabilities","The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory (http://aix.software.ibm.com/aix/efixes/security/openssh_advisory6.asc) to obtain more information
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  IBM AIX ""OpenSSH"" Local Privilege Escalation Vulnerabilities: AIX 5.3, 6.1, 7.1 (https://aix.software.ibm.com/aix/efixes/security/openssh_fix6.tar)","AIX is prone to the following vulnerabilities:
 
The monitor component in sshd accepts extraneous username 
        data in MONITOR_REQ_PAM_INIT_CTX requests, which allows local users to
        conduct impersonation attacks by leveraging any SSH login access in
        conjunction with control of the sshd uid to send a crafted
        MONITOR_REQ_PWNAM request.
 
Use-after-free vulnerability in the mm_answer_pam_free_ctx 
        function in sshd might allow local users to gain privileges by
        leveraging control of the sshd uid to send an unexpectedly early
        MONITOR_REQ_PAM_FREE_CTX request.
 
Affected Platforms: 
AIX 5.3, 6.1 and 7.1
 
Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.",Exploitation could allow a local attacker to conduct privilege escalation attacks.
"CVE-2015-3197,CVE-2015-4000",App3,$300000,1,5.9,0.85,1,0.8,4.0120000000000005,4.0120000000000005,IBM,AIX 6.1,IBM AIX OpenSSL Multiple Vulnerabilities,"The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory (http://aix.software.ibm.com/aix/efixes/security/openssl_advisory17.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  IBM AIX OpenSSL Multiple Vulnerabilities: AIX 5.3, 6.1, 7.1, 7.2 (ftp://aix.software.ibm.com/aix/efixes/security/openssl_fix17.tar)","AIX is prone to the following vulnerabilities:
 
A malicious client can negotiate SSLv2 ciphers that have been 
        disabled on the server and complete SSLv2 handshakes even if all SSLv2 
        ciphers have been disabled, provided that the SSLv2 protocol was not 
        disabled via SSL_OP_NO_SSLv2.
 
A previously published vulnerability in the TLS protocol 
        allows a man-in-the-middle attacker to downgrade vulnerable TLS 
        connections using ephemeral Diffie-Hellman key exchange to 512-bit 
        export-grade cryptography. This vulnerability is known as 'Logjam'.
	    AIX OpenSSL had the Logjam mitigation for TLS clients by rejecting 
	    handshakes with DH parameters shorter than 768 bits. This limit has 
        now been increased to 1024 bits.
 
Affected Platforms: 
AIX 5.3, 6.1, 7.1, 7.2 are affected.
 
Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results. APAR versions: IV81287m9b,IV81287m9a,IV81287m9c",Exploitation could allow an attacker to conduct man-in-the-middle attacks.
CVE-2015-7575,App3,$300000,1,5.9,0.85,1,0.8,4.0120000000000005,4.0120000000000005,IBM,AIX 6.1,"IBM AIX OpenSSL MD5 ""SLOTH"" Vulnerability","The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory (http://aix.software.ibm.com/aix/efixes/security/openssl_advisory16.asc) to obtain more information
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  IBM AIX OpenSSL MD5 ""SLOTH"" Vulnerability: AIX 5.3, 6.1, 7.1, 7.2 (https://www14.software.ibm.com/webapp/iwm/web/preLogin.do?source=aixbp)","AIX is prone to the following vulnerabilities: The TLS protocol could allow weaker than expected security 
        caused by a collision attack when using the MD5 hash function for 
        signing a ServerKeyExchange message during a TLS handshake.  Affected Platforms: AIX 5.3, 6.1, 7.1 and 7.2 are affected

Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.",An attacker could exploit this vulnerability using man-in-the-middle techniques to impersonate a TLS server and obtain credentials.
"CVE-2015-7575,CVE-2016-0266",App3,$300000,1,5.9,0.85,1,0.8,4.0120000000000005,4.0120000000000005,IBM,AIX 6.1,IBM AIX Sendmail MD5 and TLS Vulnerability,"The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory (http://aix.software.ibm.com/aix/efixes/security/nettcp_advisory2.asc) to obtain more information
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  nettcp_advisory2: AIX 5.3, 6.1, 7.1, 7.2 (ftp://aix.software.ibm.com/aix/efixes/security/nettcp_fix2.tar)","AIX is prone to the following vulnerabilities: 
The TLS protocol could allow weaker than expected security caused by a collision attack when using the MD5 hash function for signing a ServerKeyExchange message during a TLS handshake. (CVE-2015-7575)
 
IBM AIX does not require the newest version of TLS by default which could allow a remote attacker to obtain sensitive information using man in the middle techniques. (CVE-2016-0266)
 
Affected Platforms: AIX
 Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.  APAR versions: IV86120m9a,IV86116m5b,IV86116m6a,IV86116m7a,IV86117m5a,IV86117m6a,IV86117m7a,IV86118m2a",An attacker could exploit this vulnerability using man-in-the-middle techniques to impersonate a TLS server and obtain credentials.
"CVE-2017-3142,CVE-2017-3143",App3,$300000,1,5.9,0.85,1,0.8,4.0120000000000005,4.0120000000000005,IBM,AIX 6.1,IBM AIX BIND Security Bypass Vulnerability (bind_advisory16),"The vendor has released fixes to resolve this vulnerability. Refer to AIX bind_advisory16 (https://aix.software.ibm.com/aix/efixes/security/bind_advisory16.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  bind_advisory16 (https://aix.software.ibm.com/aix/efixes/security/bind_advisory16.asc)","ISC BIND could allow a remote attacker to bypass security 
        restrictions, caused by an error when an attacker can send and receive 
        messages to an authoritative DNS server and has knowledge of a valid 
        TSIG key name.  
Affected Versions:  
AIX 5.3,6.1, 7.1,7.2
 
APAR versions: 
IV98826m9a,  IV98828m4a, IV98828m5b, IV98829m0a, IV98829m0b, IV98830m1a, IV98830m1b, IV98825m9a 
 
Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.","By sending a specially crafted request packet, an 
        attacker could exploit this vulnerability to bypass TSIG authentication
        on AXFR requests and transfer the target zone."
CVE-2021-45105,App10,$15000,1,5.9,0.85,1,0.8,4.0120000000000005,4.0120000000000005,Apache,AIX 6.1,Apache Log4j Denial of Service (DOS) Vulnerability (Log4Shell),"Apache recommends customers to upgrade to Log4j 2.3.1 (for Java 6), 2.12.3 (for Java 7), or 2.17.0 (for Java 8 and later). If updating the version is not possible, please refer to the mitigations mentioned here Log4j (https://logging.apache.org/log4j/2.x/security.html). 
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  Apache Log4j (https://logging.apache.org/log4j/2.x/download.html)","Apache Log4j2 does not always protect from infinite recursion in lookup evaluation (CVE-2021-45105), this was made public on December 18, 2021

Affected versions: 
Log4j versions  all versions from 2.0-beta9 to 2.16.0, excluding 2.12.3, 2.3.1

QID Detection: (Authenticated) - Windows  
On the Windows system, the QID identifies a vulnerable instance of log4j via WMI to check log4j included in the running processes via the command-line.

QID Detection: (Authenticated) - Linux 
This detection is based on querying the OS package managers on the target. If the target has a log4j package with a version less than or equal to 2.16.0, the target is flagged as vulnerable.","Apache Log4j2 versions 2.0-alpha1 through 2.16.0, excluding 2.12.3, 2.3.1  did not protect from uncontrolled recursion from self-referential lookups. When the logging configuration uses a non-default Pattern Layout with a Context Lookup (for example, $${ctx:loginId}), attackers with control over Thread Context Map (MDC) input data can craft malicious input data that contains a recursive lookup, resulting in a StackOverflowError that will terminate the process. This is also known as a DOS (Denial of Service) attack."
CVE-2021-45105,App2,$500000,1,5.9,0.85,1,0.8,4.0120000000000005,4.0120000000000005,Apache,AIX 6.1,Apache Log4j Denial of Service (DOS) Vulnerability (Log4Shell),"Apache recommends customers to upgrade to Log4j 2.3.1 (for Java 6), 2.12.3 (for Java 7), or 2.17.0 (for Java 8 and later). If updating the version is not possible, please refer to the mitigations mentioned here Log4j (https://logging.apache.org/log4j/2.x/security.html). 
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  Apache Log4j (https://logging.apache.org/log4j/2.x/download.html)","Apache Log4j2 does not always protect from infinite recursion in lookup evaluation (CVE-2021-45105), this was made public on December 18, 2021

Affected versions: 
Log4j versions  all versions from 2.0-beta9 to 2.16.0, excluding 2.12.3, 2.3.1

QID Detection: (Authenticated) - Windows  
On the Windows system, the QID identifies a vulnerable instance of log4j via WMI to check log4j included in the running processes via the command-line.

QID Detection: (Authenticated) - Linux 
This detection is based on querying the OS package managers on the target. If the target has a log4j package with a version less than or equal to 2.16.0, the target is flagged as vulnerable.","Apache Log4j2 versions 2.0-alpha1 through 2.16.0, excluding 2.12.3, 2.3.1  did not protect from uncontrolled recursion from self-referential lookups. When the logging configuration uses a non-default Pattern Layout with a Context Lookup (for example, $${ctx:loginId}), attackers with control over Thread Context Map (MDC) input data can craft malicious input data that contains a recursive lookup, resulting in a StackOverflowError that will terminate the process. This is also known as a DOS (Denial of Service) attack."
CVE-2021-45105,App3,$300000,1,5.9,0.85,1,0.8,4.0120000000000005,4.0120000000000005,Apache,AIX 6.1,Apache Log4j Denial of Service (DOS) Vulnerability (Log4Shell),"Apache recommends customers to upgrade to Log4j 2.3.1 (for Java 6), 2.12.3 (for Java 7), or 2.17.0 (for Java 8 and later). If updating the version is not possible, please refer to the mitigations mentioned here Log4j (https://logging.apache.org/log4j/2.x/security.html). 
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  Apache Log4j (https://logging.apache.org/log4j/2.x/download.html)","Apache Log4j2 does not always protect from infinite recursion in lookup evaluation (CVE-2021-45105), this was made public on December 18, 2021

Affected versions: 
Log4j versions  all versions from 2.0-beta9 to 2.16.0, excluding 2.12.3, 2.3.1

QID Detection: (Authenticated) - Windows  
On the Windows system, the QID identifies a vulnerable instance of log4j via WMI to check log4j included in the running processes via the command-line.

QID Detection: (Authenticated) - Linux 
This detection is based on querying the OS package managers on the target. If the target has a log4j package with a version less than or equal to 2.16.0, the target is flagged as vulnerable.","Apache Log4j2 versions 2.0-alpha1 through 2.16.0, excluding 2.12.3, 2.3.1  did not protect from uncontrolled recursion from self-referential lookups. When the logging configuration uses a non-default Pattern Layout with a Context Lookup (for example, $${ctx:loginId}), attackers with control over Thread Context Map (MDC) input data can craft malicious input data that contains a recursive lookup, resulting in a StackOverflowError that will terminate the process. This is also known as a DOS (Denial of Service) attack."
"CVE-2015-6563,CVE-2015-6564",App10,$30000,2,2,0.85,1,0.8,1.36,2.72,IBM,AIX 6.1,"IBM AIX ""OpenSSH"" Local Privilege Escalation Vulnerabilities","The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory (http://aix.software.ibm.com/aix/efixes/security/openssh_advisory6.asc) to obtain more information
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  IBM AIX ""OpenSSH"" Local Privilege Escalation Vulnerabilities: AIX 5.3, 6.1, 7.1 (https://aix.software.ibm.com/aix/efixes/security/openssh_fix6.tar)","AIX is prone to the following vulnerabilities:
 
The monitor component in sshd accepts extraneous username 
        data in MONITOR_REQ_PAM_INIT_CTX requests, which allows local users to
        conduct impersonation attacks by leveraging any SSH login access in
        conjunction with control of the sshd uid to send a crafted
        MONITOR_REQ_PWNAM request.
 
Use-after-free vulnerability in the mm_answer_pam_free_ctx 
        function in sshd might allow local users to gain privileges by
        leveraging control of the sshd uid to send an unexpectedly early
        MONITOR_REQ_PAM_FREE_CTX request.
 
Affected Platforms: 
AIX 5.3, 6.1 and 7.1
 
Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.",Exploitation could allow a local attacker to conduct privilege escalation attacks.
CVE-2016-0266,App3,$300000,1,3.7,0.85,1,0.8,2.516,2.516,IBM,AIX 6.1,IBM AIX pconsole Information Disclosure Vulnerability (pconsole_advisory2.asc),"The vendor has released fixes to resolve this vulnerability. Refer to AIX pconsole_advisory2.asc (http://aix.software.ibm.com/aix/efixes/security/pconsole_advisory2.asc) to obtain more information.
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  AIX pconsole_advisory2.asc: AIX 6.1, 7.1 (            https://aix.software.ibm.com/aix/efixes/security/pconsole_fix2.tar )","IBM AIX is prone to a remote information-disclosure vulnerability.
 IBM AIX 6.1 and 7.1 do not default to the latest TLS version, which makes it easier for man-in-the-middle attackers to obtain sensitive information via unspecified vectors.(CVE-2016-0266)
 
Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.
 
APAR versions: 
IV89737s2a, IV89737, IV89739s7a, IV89739",Remote attackers can exploit this issue to obtain sensitive information that may lead to further attacks.
CVE-1999-0183,App2,$500000,1,2,0.85,1,0.8,1.36,1.36,Others,AIX 6.1,TFTP Daemon Theft of '/etc/passwd' file,"Be sure to use the latest version of the TFTP daemon, which should deny transfer of files that are not in the working directory of the TFTP daemon (/tftpboot).
 
We strongly advise that you only make files in the /tftpboot directory accessible.  This can usually be done by modifying the /usr/sbin/in.tftpd entry in your /etc/inetd.conf file to include '/tftpboot' as the first argument.  For more information, see the man pages of the tftpd daemon.","TFTP (Trivial File Transfer Protocol) is generally used to load a boot file from a server when a client does not have a disk to boot from. 
 
The TFTP protocol does not have any access control.  Therefore, unauthorized users can connect to this daemon from a remote system and download or upload files without a password.  Some older versions of this FTP protocol contain vulnerabilities that give unauthorized users direct access to all files on your filesystem.","If the default working directory of the TFTP daemon is '/tftpboot', then unauthorized users can request that the server transfer the '/etc/passwd' or '../etc/passwd' files. This could lead to further attacks against the host."
CVE-1999-0618,App10,$15000,1,2,0.85,1,0.8,1.36,1.36,Others,AIX 6.1,Remote Execution Service Open,"We strongly advise that you remove the ""rexec"" service from your system.  If an alternative is required, we recommend installing Secure Shell (SSH) which has the same features as the ""r* services"" daemon, but also adds an encryption layer on top of the protocol to prevent eavesdropping and provide better authentication.","The ""Remote Execution"" (rexec) service, which uses TCP port number 512, was detected on this host.  This service is based on a login/password authentication procedure and allows remote users to execute commands on the system. rexec uses a protocol similar to the rshd/rlogind apart from the .rhosts and /etc/host.equiv authentication (where no password is required)","If unauthorized users manage to obtain information about the login names of the users on your system (by using ""finger"", for example), then they can try to brute force accounts by testing login/password combinations.  Compared to many telnet daemons that deny login as root, rexec allows remote users with the correct password to execute commands as root."
CVE-1999-0618,App2,$500000,1,2,0.85,1,0.8,1.36,1.36,Others,AIX 6.1,Remote Execution Service Open,"We strongly advise that you remove the ""rexec"" service from your system.  If an alternative is required, we recommend installing Secure Shell (SSH) which has the same features as the ""r* services"" daemon, but also adds an encryption layer on top of the protocol to prevent eavesdropping and provide better authentication.","The ""Remote Execution"" (rexec) service, which uses TCP port number 512, was detected on this host.  This service is based on a login/password authentication procedure and allows remote users to execute commands on the system. rexec uses a protocol similar to the rshd/rlogind apart from the .rhosts and /etc/host.equiv authentication (where no password is required)","If unauthorized users manage to obtain information about the login names of the users on your system (by using ""finger"", for example), then they can try to brute force accounts by testing login/password combinations.  Compared to many telnet daemons that deny login as root, rexec allows remote users with the correct password to execute commands as root."
CVE-1999-0618,App3,$300000,1,2,0.85,1,0.8,1.36,1.36,Others,AIX 6.1,Remote Execution Service Open,"We strongly advise that you remove the ""rexec"" service from your system.  If an alternative is required, we recommend installing Secure Shell (SSH) which has the same features as the ""r* services"" daemon, but also adds an encryption layer on top of the protocol to prevent eavesdropping and provide better authentication.","The ""Remote Execution"" (rexec) service, which uses TCP port number 512, was detected on this host.  This service is based on a login/password authentication procedure and allows remote users to execute commands on the system. rexec uses a protocol similar to the rshd/rlogind apart from the .rhosts and /etc/host.equiv authentication (where no password is required)","If unauthorized users manage to obtain information about the login names of the users on your system (by using ""finger"", for example), then they can try to brute force accounts by testing login/password combinations.  Compared to many telnet daemons that deny login as root, rexec allows remote users with the correct password to execute commands as root."
"CVE-2015-6563,CVE-2015-6564",App3,$300000,1,2,0.85,1,0.8,1.36,1.36,IBM,AIX 6.1,"IBM AIX ""OpenSSH"" Local Privilege Escalation Vulnerabilities","The vendor has released fixes to resolve this vulnerability. Refer to AIX Advisory (http://aix.software.ibm.com/aix/efixes/security/openssh_advisory6.asc) to obtain more information
 Patch: 
Following are links for downloading patches to fix the vulnerabilities:
  IBM AIX ""OpenSSH"" Local Privilege Escalation Vulnerabilities: AIX 5.3, 6.1, 7.1 (https://aix.software.ibm.com/aix/efixes/security/openssh_fix6.tar)","AIX is prone to the following vulnerabilities:
 
The monitor component in sshd accepts extraneous username 
        data in MONITOR_REQ_PAM_INIT_CTX requests, which allows local users to
        conduct impersonation attacks by leveraging any SSH login access in
        conjunction with control of the sshd uid to send a crafted
        MONITOR_REQ_PWNAM request.
 
Use-after-free vulnerability in the mm_answer_pam_free_ctx 
        function in sshd might allow local users to gain privileges by
        leveraging control of the sshd uid to send an unexpectedly early
        MONITOR_REQ_PAM_FREE_CTX request.
 
Affected Platforms: 
AIX 5.3, 6.1 and 7.1
 
Note:The detection requires root privileges to run ""emgr -c"" to check for patches. In absence of such privileges, the detection may not output actual results.",Exploitation could allow a local attacker to conduct privilege escalation attacks.

Entrez les données au format: 'CVEIDS,App,ImpactPerDay,CountVuln,CVSSBase,Exploitability,RemediationLevel,AssetCriticity,VulnRiskScore,SumVulnRiskScore,Technology,OperatingSystems,Title,Solution,Threat,Impact'.

Top Vuln

Nombre de clusters

Revues par cluster

Optimisation de la Remédiation des Vulnérabilités