CVE-2018-1383

high-risk

Published 2018-02-13

A software logic bug creates a vulnerability in an AIX 6.1, 7.1, and 7.2 daemon which could allow a user with root privileges on one system, to obtain root access on another machine. IBM X-force ID: 138117.

Do I need to act?

0.51% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 9.1/10 Critical

NETWORK / LOW complexity

Affected Products (19)

Aix

Affected Vendors

Ibm

References (10)

Vendor Advisory http://aix.software.ibm.com/aix/efixes/security/aixbase_advisory.asc

Vendor Advisory http://www-01.ibm.com/support/docview.wss?uid=isg3T1026948

Third Party Advisory http://www.securityfocus.com/bid/102989

Third Party Advisory http://www.securitytracker.com/id/1040358

VDB Entry https://exchange.xforce.ibmcloud.com/vulnerabilities/138117

Vendor Advisory http://aix.software.ibm.com/aix/efixes/security/aixbase_advisory.asc

Vendor Advisory http://www-01.ibm.com/support/docview.wss?uid=isg3T1026948

Third Party Advisory http://www.securityfocus.com/bid/102989

Third Party Advisory http://www.securitytracker.com/id/1040358

VDB Entry https://exchange.xforce.ibmcloud.com/vulnerabilities/138117

/ 100

high-risk

Severity 31/34 · Critical

Exploitability 2/34 · Minimal

Exposure 19/34 · Moderate