6.7
CVE-2025-36035
- EPSS 0.12%
- Veröffentlicht 14.09.2025 12:52:48
- Zuletzt bearbeitet 19.12.2025 13:29:49
- Quelle psirt@us.ibm.com
- CVE-Watchlists
- Unerledigt
IBM PowerVM Hypervisor denial of service
IBM PowerVM Hypervisor FW950.00 through FW950.E0, FW1050.00 through FW1050.50, and FW1060.00 through FW1060.40 could allow a local privileged user to cause a denial of service by issuing a specially crafted IBM i hypervisor call that would disclose memory contents or consume excessive memory resources.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Powervm Hypervisor Version >= FW950.00 <= FW950.E0
Ibm ≫ Powervm Hypervisor Version >= FW1050.00 <= FW1050.50
Ibm ≫ Powervm Hypervisor Version >= FW1060.00 <= FW1060.40
Ibm ≫ Powervm Hypervisor Version >= FW1050.00 <= FW1050.50
Ibm ≫ Power System E1050 (9043-mrx) Version-
Ibm ≫ Power System L1022 (9786-22h) Version-
Ibm ≫ Power System L1024 (9786-42h) Version-
Ibm ≫ Power System S1012 (9028-21b) Version-
Ibm ≫ Power System S1014 (9105-41b) Version-
Ibm ≫ Power System S1022 (9105-22a) Version-
Ibm ≫ Power System S1022s (9105-22b) Version-
Ibm ≫ Power System S1024 (9105-42a) Version-
Ibm ≫ Power System L1022 (9786-22h) Version-
Ibm ≫ Power System L1024 (9786-42h) Version-
Ibm ≫ Power System S1012 (9028-21b) Version-
Ibm ≫ Power System S1014 (9105-41b) Version-
Ibm ≫ Power System S1022 (9105-22a) Version-
Ibm ≫ Power System S1022s (9105-22b) Version-
Ibm ≫ Power System S1024 (9105-42a) Version-
Ibm ≫ Powervm Hypervisor Version >= FW1060.00 <= FW1060.40
Ibm ≫ Power System E1050 (9043-mrx) Version-
Ibm ≫ Power System L1022 (9786-22h) Version-
Ibm ≫ Power System L1024 (9786-42h) Version-
Ibm ≫ Power System S1012 (9028-21b) Version-
Ibm ≫ Power System S1014 (9105-41b) Version-
Ibm ≫ Power System S1022 (9105-22a) Version-
Ibm ≫ Power System S1022s (9105-22b) Version-
Ibm ≫ Power System S1024 (9105-42a) Version-
Ibm ≫ Power System L1022 (9786-22h) Version-
Ibm ≫ Power System L1024 (9786-42h) Version-
Ibm ≫ Power System S1012 (9028-21b) Version-
Ibm ≫ Power System S1014 (9105-41b) Version-
Ibm ≫ Power System S1022 (9105-22a) Version-
Ibm ≫ Power System S1022s (9105-22b) Version-
Ibm ≫ Power System S1024 (9105-42a) Version-
VulnDex Vulnerability Enrichment
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.12% | 0.024 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5.1 | 0.8 | 4.2 |
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H
|
| psirt@us.ibm.com | 6.7 | 1.5 | 4.7 |
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:H
|
CWE-770 Allocation of Resources Without Limits or Throttling
The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.
https://www.ibm.com/support/pages/node/7244813