Improper input validation in IBM Aix

CVE-2012-0723

The kernel in IBM AIX 5.3, 6.1, and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, does not properly implement the dupmsg system call, which allows local users to cause a denial of service (system crash) via a crafted application.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.004 (31.2th percentile) — read the EPSS interpretation.

Affected products

  • Ibm Aix — versions 5.3, 6.1, 7.1
  • Ibm Vios — versions 2.2.1.4
  • N/a — versions n/a

Weakness classification (CWE)

References