CVE-2012-4817

IBM VIOS < 2.2.1.4-FP-25 SP-02 - Denial of Service via NFSv4 GID Handling

Title source: llm
STIX 2.1

Description

The NFSv4 client implementation in IBM AIX 5.3, 6.1, and 7.1, and VIOS before 2.2.1.4-FP-25 SP-02, does not properly handle GID values, which allows remote attackers to cause a denial of service via unspecified vectors.

References (11)

Core 11
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1027531
Vendor Advisory vendor-advisory x_refsource_aixapar
http://www.ibm.com/support/docview.wss?uid=isg1IV12169
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/85427
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/50619
Vendor Advisory vendor-advisory x_refsource_aixapar
http://www.ibm.com/support/docview.wss?uid=isg1IV17855
Vendor Advisory vendor-advisory x_refsource_aixapar
http://www.ibm.com/support/docview.wss?uid=isg1IV10327
Vendor Advisory vendor-advisory x_refsource_aixapar
http://www.ibm.com/support/docview.wss?uid=isg1IV26436
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/55546
Vendor Advisory vendor-advisory x_refsource_aixapar
http://www.ibm.com/support/docview.wss?uid=isg1IV11629
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/78431

Scores

EPSS 0.0759
EPSS Percentile 93.9%

Details

Status published
Products (20)
ibm/aix 5.3
ibm/aix 6.1
ibm/aix 7.1
ibm/vios 1.4.1.2
ibm/vios 1.5.1.1
ibm/vios 1.5.2.1
ibm/vios 1.5.2.6
ibm/vios 2.1.0.0
ibm/vios 2.1.2.10
ibm/vios 2.1.2.12
... and 10 more
Published Sep 14, 2012
Tracked Since Feb 18, 2026