AI
Product
AIX
545
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 49High 111Medium 63Low 9
Watch
Add AIX to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-22350 | 5.5 | Mar 2 | IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in CAA to cause a denial of service Affected: 7.1; 7.2; 7.3 |
| CVE-2021-38996 | 5.5 | Mar 2 | IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to cause a denial of service Affected: 7.1; 7.2; 7.3 |
| CVE-2021-38993 | 5.5 | Feb 25 | IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the smbcd daemon to cause a denial of service Affected: 7.1; 7.2; 7.3 |
| CVE-2021-38995 | 5.5 | Feb 24 | IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to cause a denial of service Affected: 7.1; 7.2; 7.3 |
| CVE-2021-38994 | 5.5 | Feb 24 | IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to cause a denial of service Affected: 7.1; 7.2; 7.3 |
| CVE-2021-29862 | 5.5 | Aug 26 | IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to cause a denial of service Affected: 7.1; 7.2 |
| CVE-2021-29727 | 5.5 | Aug 26 | IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a local user to exploit a vulnerability in the AIX kernel to cause a denial of service Affected: 7.1; 7.2 |
| CVE-2020-4887 | 5.5 | Jan 20 | IBM AIX 7.1, 7.2 and AIX VIOS 3.1 could allow a local user to exploit a vulnerability in the gencore user command to create arbitrary files in any directory Affected: 7.1; 7.2 |
| CVE-2018-1655 | 5.5 | Jun 22 | IBM AIX 5.3, 6.1, 7.1, and 7.2 contains a vulnerability in the rmsock command that may be used to expose kernel memory Affected: 5.3; 6.1; 7.1; 7.2 |
| CVE-2016-8944 | 5.5 | Feb 15 | IBM AIX 7.1 and 7.2 allows a local user to open a file with a specially crafted argument that would crash the system Affected: 7.1; 7.2 |
| CVE-1999-0011 | 5.4 | Apr 8 | Denial of Service vulnerabilities in BIND 4.9 and BIND 8 Releases via CNAME record and zone transfer Affected: 4.1; 4.2; 4.3 |
| CVE-2026-16833 | 5.3 | Aug 19 | Vulnerabilities in IBM AIX and PowerVM VIOS Affected: 7.2; 7.3 |
| CVE-2026-16829 | 5.3 | Aug 19 | Vulnerabilities in IBM AIX and PowerVM VIOS Affected: 7.2; 7.3 |
| CVE-2026-16866 | 4.8 | Aug 19 | Vulnerabilities in IBM AIX and PowerVM VIOS Affected: 7.2; 7.3 |
| CVE-2020-4788 | 4.7 | Nov 20 | IBM Power9 (AIX 7.1, 7.2, and VIOS 3.1) processors could allow a local user to obtain sensitive information from the data in the L1 cache under extenuating circumstances Affected: 7.1.0; 7.1.5; 7.2.0; 7.2.3; 7.2.4; 7.2.5 |
| CVE-2026-16897 | 4.4 | Aug 19 | Vulnerabilities in IBM AIX and PowerVM VIOS Affected: 7.2; 7.3 |
| CVE-2022-43382 | 4.4 | Dec 20 | IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a local user with elevated privileges to exploit a vulnerability in the lpd daemon to cause a denial of service Affected: 7.1; 7.2; 7.3 |
| CVE-2021-38955 | 4.4 | Mar 1 | IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a local user with elevated privileges to cause a denial of service due to a file creation vulnerability in the audit commands Affected: 7.1; 7.2; 7.3 |
| CVE-2021-29693 | 4.4 | Jun 28 | IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a local user that is in the with elevated group privileges to cause a denial of service due to a vulnerability in the lpd daemon Affected: 7.1; 7.2 |
| CVE-2026-16886 | 4.3 | Aug 19 | Vulnerabilities in IBM AIX and PowerVM VIOS Affected: 7.2; 7.3 |
| CVE-2026-16849 | 4.3 | Aug 19 | Vulnerabilities in IBM AIX and PowerVM VIOS Affected: 7.2; 7.3 |
| CVE-2026-16825 | 4.2 | Aug 19 | Vulnerabilities in IBM AIX and PowerVM VIOS Affected: 7.2; 7.3 |
| CVE-1999-0524 | 4.0 | Aug 1 | ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts Affected: All versions, or not specified |
| CVE-2026-16888 | 3.7 | Aug 19 | Vulnerabilities in IBM AIX and PowerVM VIOS Affected: 7.2; 7.3 |
| CVE-2026-0989 | 3.7 | Jan 15 | Libxml2: unbounded relaxng include recursion leading to stack overflow Affected: 7.2.5 before 7.2.5.12; 7.3.2 before 7.3.3.3; 7.3.4 |
| CVE-2016-0281 | 3.7 | Aug 8 | The mustendd driver in IBM AIX 5.3, 6.1, 7.1, and 7.2 and VIOS 2.2.x, when the jumbo_frames feature is not enabled, allows remote attackers to cause a denial of service (FC1763 or… Affected: 5.3; 6.1; 7.1; 7.2 |
| CVE-2016-0266 | 3.7 | Aug 8 | IBM AIX 5.3, 6.1, 7.1, and 7.2 and VIOS 2.2.x do not default to the latest TLS version, which makes it easier for man-in-the-middle attackers to obtain sensitive information via… Affected: 5.3; 6.1; 7.1; 7.2 |
| CVE-2026-16890 | 3.6 | Aug 19 | Vulnerabilities in IBM AIX and PowerVM VIOS Affected: 7.2; 7.3 |
| CVE-2014-3566 | 3.4 | Oct 15 | The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain… Affected: 5.3; 6.1; 7.1 |
| CVE-2026-16891 | 3.3 | Aug 19 | Vulnerabilities in IBM AIX and PowerVM VIOS Affected: 7.2; 7.3 |
| CVE-2025-8732 | 3.3 | Aug 8 | libxml2 xmlcatalog xmlParseSGMLCatalog recursion Affected: 7.2.5 before 7.2.5.12; 7.3.2 before 7.3.3.3; 7.3.4 |
| CVE-2026-0992 | 2.9 | Jan 15 | Libxml2: libxml2: denial of service via crafted xml catalogs Affected: 7.2.5 before 7.2.5.12; 7.3.2 before 7.3.3.3; 7.3.4 |
| CVE-2015-4948 | – | Oct 16 | netstat in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x, when a fibre channel adapter is used, allows local users to gain privileges via unspecified vectors Affected: 5.3; 6.1; 7.1 |
| CVE-2014-8904 | – | Jan 15 | lquerylv in cmdlvm in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x allows local users to gain privileges via a crafted DBGCMD_LQUERYLV environment-variable value Affected: 5.3; 6.1; 7.1 |
| CVE-2014-3074 | – | Jul 2 | The runtime linker in IBM AIX 6.1 and 7.1 and VIOS 2.2.x allows local users to create a mode-666 root-owned file, and consequently gain privileges, by setting crafted… Affected: 6.1; 7.1 |
| CVE-2014-3977 | – | Jun 8 | libodm.a in IBM AIX 6.1 and 7.1, and VIOS 2.2.x, allows local users to overwrite arbitrary files via a symlink attack on a temporary file Affected: 6.1; 7.1 |
| CVE-2014-0930 | – | May 8 | The ptrace system call in IBM AIX 5.3, 6.1, and 7.1, and VIOS 2.2.x, allows local users to cause a denial of service (system crash) or obtain sensitive information from kernel… Affected: 5.3; 6.1; 7.1 |
| CVE-2014-0899 | – | Mar 11 | ftpd in IBM AIX 7.1.1 before SP10 and 7.1.2 before SP5, when a Workload Partition (aka WPAR) for AIX 5.2 or 5.3 is used, allows remote authenticated users to bypass intended… Affected: 7.1.1; 7.1.2 |
| CVE-2013-5419 | – | Oct 4 | Multiple buffer overflows in (1) mkque and (2) mkquedev in bos.rte.printers in IBM AIX 6.1 and 7.1 allow local users to gain privileges by leveraging printq group membership Affected: 6.1; 7.1 |
| CVE-2013-4011 | – | Jul 18 | Multiple unspecified vulnerabilities in the InfiniBand subsystem in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, allow local users to gain privileges via vectors involving… Affected: 6.1; 7.1 |
| CVE-2013-3005 | – | Jul 6 | The TFTP client in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, when RBAC is enabled, allows remote authenticated users to bypass intended file-ownership restrictions, and… Affected: 6.1; 7.1 |
| CVE-2013-3035 | – | Jun 21 | The IPv6 implementation in the inet subsystem in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, allows remote attackers to cause a denial of service (system hang) via a… Affected: 6.1; 7.1 |
| CVE-2012-4845 | – | Oct 20 | The FTP client in IBM AIX 6.1 and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, does not properly manage privileges in an RBAC environment, which allows attackers to bypass intended… Affected: 6.1; 7.1 |
| CVE-2012-4833 | – | Oct 1 | fuser in IBM AIX 6.1 and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, does not properly restrict the -k option, which allows local users to kill arbitrary processes via a crafted command… Affected: 6.1; 7.1 |
| CVE-2012-4817 | – | Sep 14 | The NFSv4 client implementation in IBM AIX 5.3, 6.1, and 7.1, and VIOS before 2.2.1.4-FP-25 SP-02, does not properly handle GID values, which allows remote attackers to cause a… Affected: 5.3; 6.1; 7.1 |
| CVE-2012-0723 | – | Jul 30 | The kernel in IBM AIX 5.3, 6.1, and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, does not properly implement the dupmsg system call, which allows local users to cause a denial of service… Affected: 5.3; 6.1; 7.1 |
| CVE-2012-2200 | – | Jun 27 | The default configuration of sendmail in IBM AIX 6.1 and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, allows local users to gain privileges by entering a command in a .forward file in a… Affected: 6.1; 7.1 |
| CVE-2012-2179 | – | Jun 22 | libodm.a in IBM AIX 5.3, 6.1, and 7.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary file Affected: 5.3; 6.1; 7.1 |
| CVE-2012-2192 | – | Jun 20 | The socketpair function in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.1.4-FP-25 SP-02 allows local users to cause a denial of service (system crash) via a crafted application that… Affected: 5.3; 6.1; 7.1 |
| CVE-2012-0745 | – | May 4 | The getpwnam function in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.1.0.10 through 2.2.1.3 does not properly interact with customer-extended LDAP user filtering, which allows local… Affected: 5.3; 6.1; 7.1 |
The 500 most important CVEs for this product (exploited first, then by severity)