VI
Product
VIOS
237
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 46High 104Medium 57Low 9
Watch
Add VIOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-16897 | 4.4 | Aug 19 | Vulnerabilities in IBM AIX and PowerVM VIOS Affected: 4.1.0 before 4.1.0.50; 4.1.1.0 before 4.1.1.30; 4.1.2.0 before 4.1.2.20 |
| CVE-2022-43382 | 4.4 | Dec 20 | IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a local user with elevated privileges to exploit a vulnerability in the lpd daemon to cause a denial of service Affected: 3.1 |
| CVE-2021-38955 | 4.4 | Mar 1 | IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a local user with elevated privileges to cause a denial of service due to a file creation vulnerability in the audit commands Affected: 3.1 |
| CVE-2021-29693 | 4.4 | Jun 28 | IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a local user that is in the with elevated group privileges to cause a denial of service due to a vulnerability in the lpd daemon Affected: 3.1 |
| CVE-2026-16886 | 4.3 | Aug 19 | Vulnerabilities in IBM AIX and PowerVM VIOS Affected: 4.1.0 before 4.1.0.50; 4.1.1.0 before 4.1.1.30; 4.1.2.0 before 4.1.2.20 |
| CVE-2026-16849 | 4.3 | Aug 19 | Vulnerabilities in IBM AIX and PowerVM VIOS Affected: 4.1.0 before 4.1.0.50; 4.1.1.0 before 4.1.1.30; 4.1.2.0 before 4.1.2.20 |
| CVE-2026-16825 | 4.2 | Aug 19 | Vulnerabilities in IBM AIX and PowerVM VIOS Affected: 4.1.0 before 4.1.0.50; 4.1.1.0 before 4.1.1.30; 4.1.2.0 before 4.1.2.20 |
| CVE-2026-16888 | 3.7 | Aug 19 | Vulnerabilities in IBM AIX and PowerVM VIOS Affected: 4.1.0 before 4.1.0.50; 4.1.1.0 before 4.1.1.30; 4.1.2.0 before 4.1.2.20 |
| CVE-2026-0989 | 3.7 | Jan 15 | Libxml2: unbounded relaxng include recursion leading to stack overflow Affected: 4.1.0 before 4.1.1.30; 4.1.2.0 |
| CVE-2016-0281 | 3.7 | Aug 8 | The mustendd driver in IBM AIX 5.3, 6.1, 7.1, and 7.2 and VIOS 2.2.x, when the jumbo_frames feature is not enabled, allows remote attackers to cause a denial of service (FC1763 or… Affected: 2.2.0.10; 2.2.0.11; 2.2.0.12; 2.2.0.13; 2.2.1.0; 2.2.1.1; +18 more |
| CVE-2016-0266 | 3.7 | Aug 8 | IBM AIX 5.3, 6.1, 7.1, and 7.2 and VIOS 2.2.x do not default to the latest TLS version, which makes it easier for man-in-the-middle attackers to obtain sensitive information via… Affected: 2.2.0.10; 2.2.0.11; 2.2.0.12; 2.2.0.13; 2.2.1.0; 2.2.1.1; +27 more |
| CVE-2026-16890 | 3.6 | Aug 19 | Vulnerabilities in IBM AIX and PowerVM VIOS Affected: 4.1.0 before 4.1.0.50; 4.1.1.0 before 4.1.1.30; 4.1.2.0 before 4.1.2.20 |
| CVE-2014-3566 | 3.4 | Oct 15 | The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain… Affected: 2.2.0.10; 2.2.0.11; 2.2.0.12; 2.2.0.13; 2.2.1.0; 2.2.1.1; +18 more |
| CVE-2026-16891 | 3.3 | Aug 19 | Vulnerabilities in IBM AIX and PowerVM VIOS Affected: 4.1.0 before 4.1.0.50; 4.1.1.0 before 4.1.1.30; 4.1.2.0 before 4.1.2.20 |
| CVE-2025-8732 | 3.3 | Aug 8 | libxml2 xmlcatalog xmlParseSGMLCatalog recursion Affected: 4.1.0 before 4.1.1.30; 4.1.2.0 |
| CVE-2026-0992 | 2.9 | Jan 15 | Libxml2: libxml2: denial of service via crafted xml catalogs Affected: 4.1.0 before 4.1.1.30; 4.1.2.0 |
| CVE-2015-4948 | – | Oct 16 | netstat in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x, when a fibre channel adapter is used, allows local users to gain privileges via unspecified vectors Affected: 2.2.0; 2.2.1; 2.2.2; 2.2.3 |
| CVE-2014-8904 | – | Jan 15 | lquerylv in cmdlvm in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x allows local users to gain privileges via a crafted DBGCMD_LQUERYLV environment-variable value Affected: 2.2.0.10; 2.2.0.11; 2.2.0.12; 2.2.0.13; 2.2.1.0; 2.2.1.1; +18 more |
| CVE-2014-3074 | – | Jul 2 | The runtime linker in IBM AIX 6.1 and 7.1 and VIOS 2.2.x allows local users to create a mode-666 root-owned file, and consequently gain privileges, by setting crafted… Affected: 2.2.0.10; 2.2.0.11; 2.2.0.12; 2.2.0.13; 2.2.1.0; 2.2.1.1; +11 more |
| CVE-2014-3977 | – | Jun 8 | libodm.a in IBM AIX 6.1 and 7.1, and VIOS 2.2.x, allows local users to overwrite arbitrary files via a symlink attack on a temporary file Affected: 2.2.0.10; 2.2.0.11; 2.2.0.12; 2.2.0.13; 2.2.1.0; 2.2.1.1; +11 more |
| CVE-2014-0930 | – | May 8 | The ptrace system call in IBM AIX 5.3, 6.1, and 7.1, and VIOS 2.2.x, allows local users to cause a denial of service (system crash) or obtain sensitive information from kernel… Affected: 2.2.0.10; 2.2.0.11; 2.2.0.12; 2.2.0.13; 2.2.1.0; 2.2.1.1; +4 more |
| CVE-2013-4011 | – | Jul 18 | Multiple unspecified vulnerabilities in the InfiniBand subsystem in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, allow local users to gain privileges via vectors involving… Affected: 2.2.2.2 |
| CVE-2013-3005 | – | Jul 6 | The TFTP client in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, when RBAC is enabled, allows remote authenticated users to bypass intended file-ownership restrictions, and… Affected: 2.2.2.2 |
| CVE-2013-3035 | – | Jun 21 | The IPv6 implementation in the inet subsystem in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, allows remote attackers to cause a denial of service (system hang) via a… Affected: 2.2.1.4 |
| CVE-2012-4845 | – | Oct 20 | The FTP client in IBM AIX 6.1 and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, does not properly manage privileges in an RBAC environment, which allows attackers to bypass intended… Affected: 2.2.1.4 |
| CVE-2012-4833 | – | Oct 1 | fuser in IBM AIX 6.1 and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, does not properly restrict the -k option, which allows local users to kill arbitrary processes via a crafted command… Affected: 2.2.1.4 |
| CVE-2012-4817 | – | Sep 14 | The NFSv4 client implementation in IBM AIX 5.3, 6.1, and 7.1, and VIOS before 2.2.1.4-FP-25 SP-02, does not properly handle GID values, which allows remote attackers to cause a… Affected: 1.4.1.2; 1.5.1.1; 1.5.2.1; 1.5.2.6; 2.1.0.0; 2.1.2.10; +11 more |
| CVE-2012-0723 | – | Jul 30 | The kernel in IBM AIX 5.3, 6.1, and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, does not properly implement the dupmsg system call, which allows local users to cause a denial of service… Affected: 2.2.1.4 |
| CVE-2012-2200 | – | Jun 27 | The default configuration of sendmail in IBM AIX 6.1 and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, allows local users to gain privileges by entering a command in a .forward file in a… Affected: 2.2.1.4 |
| CVE-2012-2192 | – | Jun 20 | The socketpair function in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.1.4-FP-25 SP-02 allows local users to cause a denial of service (system crash) via a crafted application that… Affected: 2.2.1.4 |
| CVE-2012-0745 | – | May 4 | The getpwnam function in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.1.0.10 through 2.2.1.3 does not properly interact with customer-extended LDAP user filtering, which allows local… Affected: 2.1.0.10; 2.1.2.12; 2.1.2.13; 2.1.3.10; 2.2.0.10; 2.2.0.11; +5 more |
| CVE-2011-1385 | – | Mar 2 | IBM AIX 5.3, 6.1, and 7.1, and VIOS 2.1.x and 2.2.x, allows remote attackers to cause a denial of service (system crash) via an ICMP Echo Reply packet that contains 1 in the… Affected: 2.1.0.0; 2.1.2.10; 2.1.2.12; 2.1.2.13; 2.1.3.10; 2.2.0.10; +6 more |
| CVE-2010-3405 | – | Sep 16 | Buffer overflow in sa_snap in the bos.esagent fileset in IBM AIX 6.1, 5.3, and earlier and VIOS 2.1, 1.5, and earlier allows local users to leverage system group membership and… Affected: 1.5; 2.1 |
| CVE-2010-1039 | – | May 20 | Format string vulnerability in the _msgout function in rpc.pcnfsd in IBM AIX 6.1, 5.3, and earlier; IBM VIOS 2.1, 1.5, and earlier; NFS/ONCplus B.11.31_09 and earlier on HP HP-UX… Affected: through 1.5; 1.4; 2.1 |
| CVE-2010-0961 | – | Mar 10 | Buffer overflow in qoslist in bos.net.tcp.server in IBM AIX 6.1 and VIOS 2.1 allows local users to gain privileges via unspecified vectors Affected: 2.1 |
| CVE-2010-0960 | – | Mar 10 | Buffer overflow in qosmod in bos.net.tcp.server in IBM AIX 6.1 and VIOS 2.1 allows local users to gain privileges via unspecified vectors Affected: 2.1 |
| CVE-2009-3699 | – | Oct 15 | Stack-based buffer overflow in libcsa.a (aka the calendar daemon library) in IBM AIX 5.x through 5.3.10 and 6.x through 6.1.3, and VIOS 2.1 and earlier, allows remote attackers to… Affected: through 2.1.0; 1.4; 1.5.0; 1.5.1; 1.5.2 |