7.2

CVE-2008-2513

Buffer overflow in the kernel in IBM AIX 5.2, 5.3, and 6.1 allows local users to execute arbitrary code in kernel mode via unknown attack vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Aix Version5.2
Ibm ≫ Aix Version5.3
Ibm ≫ Aix Version6.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.49% 0.382
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://aix.software.ibm.com/aix/efixes/security/unix_advisory.asc
http://secunia.com/advisories/30349
http://securitytracker.com/id?1020083
http://www.ibm.com/support/docview.wss?uid=isg1IZ19911
Patch
http://www.ibm.com/support/docview.wss?uid=isg1IZ21481
Patch
http://www.ibm.com/support/docview.wss?uid=isg1IZ22368
http://www.ibm.com/support/docview.wss?uid=isg1IZ22369
http://www.ibm.com/support/docview.wss?uid=isg1IZ22370
http://www.securityfocus.com/bid/29329
http://www.vupen.com/english/advisories/2008/1626/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/42577
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5684