PT-2012-2392 · Ibm · Aix+1

Published 2012-02-03 · Updated 2017-08-29 · CVE-2012-0194

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions IBM AIX versions 5.3 through 7.1

Description The issue is related to the TCP implementation when the Large Send Offload option is enabled, allowing remote attackers to cause a denial of service. This can be achieved by sending a specially-crafted sequence of packets, which can lead to an assertion failure and panic, or a kernel panic.

Recommendations For IBM AIX versions 5.3 through 7.1, consider disabling the Large Send Offload option on network interfaces as a temporary workaround to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2012-0194

Affected Products

Aix

Ibm Aix

References · 13

• http://ibm.com/support/docview.wss?uid=isg1IV13820 · Vendor Advisory
• http://ibm.com/support/docview.wss?uid=isg1IV14211 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-0194 · Security Note
• http://ibm.com/support/docview.wss?uid=isg1IV14209 · Vendor Advisory
• http://aix.software.ibm.com/aix/efixes/security/large_send_advisory.asc · Vendor Advisory
• http://ibm.com/support/docview.wss?uid=isg1IV13827 · Vendor Advisory
• http://secunia.com/advisories/47865 · Vendor Advisory
• http://ibm.com/support/docview.wss?uid=isg1IV13751 · Vendor Advisory
• http://ibm.com/support/docview.wss?uid=isg1IV14210 · Vendor Advisory
• http://securitytracker.com/id?1026640 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/72562 · Note
• http://securityfocus.com/bid/51864 · Note
• https://aix.software.ibm.com/aix/efixes/security/large_send_advisory.asc · Note