PT-2016-4126 · Ibm · Vios+1

Published 2016-07-28 · Updated 2021-08-31 · CVE-2016-0281

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions IBM AIX versions 5.3, 6.1, 7.1, and 7.2 VIOS versions 2.2.x

Description The issue allows remote attackers to cause a denial of service, resulting in an FC1763 or FC5899 adapter crash, via crafted packets when the jumbo frames feature is not enabled.

Recommendations For IBM AIX versions 5.3, 6.1, 7.1, and 7.2, enable the jumbo frames feature to prevent the denial of service. For VIOS versions 2.2.x, enable the jumbo frames feature to prevent the denial of service. As a temporary workaround, consider restricting access to the network to minimize the risk of exploitation until the jumbo frames feature is enabled.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2016-0281

Affected Products

Ibm Aix

Vios

References · 11

• http://www-01.ibm.com/support/docview.wss?uid=swg1IV82421 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1IV84184 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1IV80569 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1IV81357 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1IV81459 · Vendor Advisory
• http://aix.software.ibm.com/aix/efixes/security/mustendd_advisory.asc · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-0281 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-0281 · Security Note
• https://t.me/cvenotify/20442 · Telegram Post
• http://securitytracker.com/id/1036481 · Note
• http://securityfocus.com/bid/92193 · Note