IBM Security Bulletin: Vulnerability in Xorg affects AIX (CVE-2018-14665) Security Bulletin
Dec 12, 2018 9:03 am EST
Categorized: High Severity
Share this post:
There is a vulnerability in Xorg that affects AIX.
CVE(s): CVE-2018-14665
Affected product(s) and affected version(s):
AIX 5.3, 6.1, 7.1, 7.2
VIOS 2.2.x
The following fileset levels are vulnerable:
key_fileset = aix
Fileset Lower Level Upper Level KEY
———————————————————
X11.base.rte 5.3.12.0 5.3.12.2 key_w_fs
X11.base.rte 6.1.9.0 6.1.9.100 key_w_fs
X11.base.rte 7.1.4.0 7.1.4.30 key_w_fs
X11.base.rte 7.1.5.0 7.1.5.31 key_w_fs
X11.base.rte 7.2.0.0 7.2.0.1 key_w_fs
X11.base.rte 7.2.1.0 7.2.1.0 key_w_fs
X11.base.rte 7.2.2.0 7.2.2.0 key_w_fs
X11.base.rte 7.2.3.0 7.2.3.15 key_w_fs
To find out whether the affected filesets are installed on your systems, refer to the lslpp command found in AIX user’s guide.
Example: lslpp -L | grep -i X11.base.rte
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: https://www-01.ibm.com/support/docview.wss?uid=ibm10742279
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/151991
from IBM Product Security Incident Response Team https://ift.tt/2ruRxJm