Vulnerability in IBM Aix
CVE-2013-4011
Multiple unspecified vulnerabilities in the InfiniBand subsystem in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, allow local users to gain privileges via vectors involving (1) arp.ib or (2) ibstat.
EPSS: 0.028 (85.2th percentile) — read the EPSS interpretation.
Affected products
Public proof-of-concept exploits
References
- psirt@us.ibm.com (x_refsource_SECUNIA, third-party-advisory)
- psirt@us.ibm.com (vendor-advisory, Vendor Advisory, x_refsource_AIXAPAR)
- psirt@us.ibm.com (vdb-entry, x_refsource_SECTRACK)
- psirt@us.ibm.com (vdb-entry, x_refsource_XF)
- psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)
- psirt@us.ibm.com (vendor-advisory, Vendor Advisory, x_refsource_AIXAPAR)
- psirt@us.ibm.com (signature, x_refsource_OVAL, vdb-entry)
- psirt@us.ibm.com (vendor-advisory, Vendor Advisory, x_refsource_AIXAPAR)
- psirt@us.ibm.com (x_refsource_OSVDB, vdb-entry)
- psirt@us.ibm.com (vendor-advisory, Vendor Advisory, x_refsource_AIXAPAR)
Frequently asked questions
- What is CVE-2013-4011?
- CVE-2013-4011 is a vulnerability in IBM Aix. Published 2013-07-18.
- Is CVE-2013-4011 known to be exploited?
- 5 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.