IBM Security Bulletin: Multiple Vulnerabilities in tcpdump affect AIX
There are multiple vulnerabilities in tcpdump that impact AIX.
CVE(s): CVE-2016-7922, CVE-2016-7923, CVE-2016-7924, CVE-2016-7925, CVE-2016-7926, CVE-2016-7927, CVE-2016-7928, CVE-2016-7930, CVE-2016-7931, CVE-2016-7932, CVE-2016-7933, CVE-2016-7934, CVE-2016-7935, CVE-2016-7936, CVE-2016-7937, CVE-2016-7939, CVE-2016-7940, CVE-2016-7973, CVE-2016-7974, CVE-2016-7975, CVE-2016-7983, CVE-2016-7984, CVE-2016-7992, CVE-2016-7993, CVE-2016-8574, CVE-2016-8575, CVE-2017-5202, CVE-2017-5203, CVE-2017-5204, CVE-2017-5482, CVE-2017-5483, CVE-2017-5484, CVE-2017-5485, CVE-2017-5486
Affected product(s) and affected version(s):
AIX 5.3, 6.1, 7.1, 7.2
The following fileset levels are vulnerable:
key_fileset = aix
Fileset Lower Level Upper Level KEY
-----------------------------------------------------
bos.net.tcp.server 5.3.12.0 5.3.12.6 key_w_fs
bos.net.tcp.server 6.1.9.0 6.1.9.201 key_w_fs
bos.net.tcp.server 7.1.3.0 7.1.3.49 key_w_fs
bos.net.tcp.server 7.1.4.0 7.1.4.31 key_w_fs
bos.net.tcp.tcpdump 7.2.0.0 7.2.0.2 key_w_fs
bos.net.tcp.tcpdump 7.2.1.0 7.2.1.0 key_w_fs
Note: To find out whether the affected filesets are installed
on your systems, refer to the lslpp command found in AIX user's
guide.
Example: lslpp -L | grep -i bos.net.tcp.server
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2sjdlpI
X-Force Database: http://ift.tt/2rl8SWu
X-Force Database: http://ift.tt/2ovoaWw
X-Force Database: http://ift.tt/2rkOxR2
X-Force Database: http://ift.tt/2rziyKC
X-Force Database: http://ift.tt/2pxDsbe
X-Force Database: http://ift.tt/2ovNnQP
X-Force Database: http://ift.tt/2pxjOMu
X-Force Database: http://ift.tt/2rkZ7aF
X-Force Database: http://ift.tt/2rz7HA8
X-Force Database: http://ift.tt/2rkUw8r
X-Force Database: http://ift.tt/2rkTrxi
X-Force Database: http://ift.tt/2ovhS9A
X-Force Database: http://ift.tt/2pxBQOx
X-Force Database: http://ift.tt/2ovyPRj
X-Force Database: http://ift.tt/2rzaBFd
X-Force Database: http://ift.tt/2rlG40e
X-Force Database: http://ift.tt/2ryUEPn
X-Force Database: http://ift.tt/2rlG4xg
X-Force Database: http://ift.tt/2pxnCx0
X-Force Database: http://ift.tt/2ovtjxL
X-Force Database: http://ift.tt/2rziquw
X-Force Database: http://ift.tt/2rlXkCr
X-Force Database: http://ift.tt/2rz80uN
X-Force Database: http://ift.tt/2pxnvlj
X-Force Database: http://ift.tt/2rz4wIO
X-Force Database: http://ift.tt/2rl1F8C
X-Force Database: http://ift.tt/2rlG6oS
X-Force Database: http://ift.tt/2ryNwCD
X-Force Database: http://ift.tt/2ovpwRm
X-Force Database: http://ift.tt/2rkT5Xo
X-Force Database: http://ift.tt/2pxuElB
X-Force Database: http://ift.tt/2rlAA5C
X-Force Database: http://ift.tt/2rz3vjM
X-Force Database: http://ift.tt/2rlQbCk
The post IBM Security Bulletin: Multiple Vulnerabilities in tcpdump affect AIX appeared first on IBM PSIRT Blog.
from IBM Product Security Incident Response Team http://ift.tt/2rldTht