CVE-2012-0723

IBM VIOS 2.2.1.4-FP-25 SP-02 and AIX 5.3, 6.1, 7.1 - Denial of Service via dupmsg System Call

Title source: llm

Description

The kernel in IBM AIX 5.3, 6.1, and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, does not properly implement the dupmsg system call, which allows local users to cause a denial of service (system crash) via a crafted application.

References (8)

Core 8

Core References

Various Sources vendor-advisory x_refsource_aixapar

http://www.ibm.com/support/docview.wss?uid=isg1IV22696

Various Sources vendor-advisory x_refsource_aixapar

http://www.ibm.com/support/docview.wss?uid=isg1IV22694

Various Sources vendor-advisory x_refsource_aixapar

http://www.ibm.com/support/docview.wss?uid=isg1IV22697

Various Sources vendor-advisory x_refsource_aixapar

http://www.ibm.com/support/docview.wss?uid=isg1IV22695

Various Sources vendor-advisory x_refsource_aixapar

http://www.ibm.com/support/docview.wss?uid=isg1IV22693

Vendor Advisory x_refsource_confirm

http://aix.software.ibm.com/aix/efixes/security/syscall_advisory.asc

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/74134

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1027315

Scores

EPSS 0.0039

EPSS Percentile 30.7%

Details

CWE

CWE-20

Status published

Products (4)

ibm/aix 5.3

ibm/aix 6.1

ibm/aix 7.1

ibm/vios 2.2.1.4 fp-25_sp-02

Published Jul 30, 2012

Tracked Since Feb 18, 2026