CVE-2018-1655: IBM AIX 5.3, 6.1, 7.1, and 7.2 contains a vulnerability in the rmsock command that may be used to expose kernel memory

Medium severity · published Jun 22, 2018

CVE-2018-1655

IBM AIX 5.3, 6.1, 7.1, and 7.2 contains a vulnerability in the rmsock command that may be used to expose kernel memory

5.5

CVSS

0.4%

EPSS

On KEV

Description

IBM AIX 5.3, 6.1, 7.1, and 7.2 contains a vulnerability in the rmsock command that may be used to expose kernel memory. IBM X-Force ID: 144748.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Attack vector

Local

Complexity

Low

Privileges

Low

User interaction

None

Confidentiality

High

Integrity

None

Availability

None

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)0.4% · higher than 37% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Aix · Ibm

5.3; 6.1; 7.1; 7.2 · source: NVD

Affected product

Aix

Ibm

All Aix CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2018-1655

CVE.org

https://www.cve.org/CVERecord?id=CVE-2018-1655

Third Party Advisory

http://aix.software.ibm.com/aix/efixes/security/rmsock_advisory2.asc

Third Party Advisory

http://www.securityfocus.com/bid/104542

Third Party Advisory

http://www.securitytracker.com/id/1041166

VDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/144748