PT-2023-15543 · Ibm · Vios+1

Published 2023-01-17 · Updated 2023-01-25 · CVE-2022-47990

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.1 through 7.3 VIOS version 3.1

Description A buffer overflow vulnerability in X11 could allow a non-privileged local user to cause a denial of service or achieve arbitrary code execution.

Recommendations For IBM AIX versions 7.1 through 7.3, apply the recommended patch to fix the vulnerability in X11. For VIOS version 3.1, apply the recommended patch to fix the vulnerability in X11. As a temporary workaround, consider restricting access to X11 until a patch is available.

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2022-47990

Affected Products

Ibm Aix

Vios

References · 5

• https://ibm.com/support/pages/node/6855827 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-47990 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-47990 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/243556 · Vendor Advisory
• https://t.me/cibsecurity/56692 · Telegram Post