EUVD-2026-62756
GHSA-mm39-wv8x-4288
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description states a remote attacker can execute arbitrary code via a stack overflow with no stated auth or interaction, so AV:N/AC:L/PR:N/UI:N with full C/I/A impact.
Primary rating from Vendor (ibm).
CVSS VectorVendor: ibm
Lifecycle Timeline
2DescriptionCVE.org
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow.
AnalysisAI
Remote code execution in IBM AIX 7.2/7.3 and IBM PowerVM VIOS 4.1 stems from a stack-based buffer overflow (CWE-121) that a network attacker can trigger without authentication or user interaction. Because the flaw carries a CVSS 9.8 with an AV:N/AC:L/PR:N/UI:N vector, a successful attack yields full compromise of confidentiality, integrity, and availability on affected enterprise UNIX hosts and virtualization I/O servers. There is no public exploit identified at time of analysis, and IBM (the reporter) has released a fix.
Technical ContextAI
IBM AIX is IBM's proprietary UNIX operating system for POWER-architecture servers, and PowerVM VIOS (Virtual I/O Server) is the appliance partition that virtualizes storage and network I/O for LPARs on the same platform; the CPE data (cpe:2.3:a:ibm:aix and cpe:2.3:a:ibm:powervm_vios) confirms both share the affected component. The root cause is CWE-121, a stack-based buffer overflow: attacker-controlled input is copied into a fixed-size stack buffer without adequate bounds checking, allowing the return address or adjacent stack data to be overwritten and control flow to be hijacked. On a networked service this typically means a crafted request to a listening daemon overflows the buffer and diverts execution into attacker-supplied code, though the specific vulnerable service/daemon is not named in the available data.
RemediationAI
Patch available per vendor advisory: apply the IBM-provided fix documented at https://www.ibm.com/support/pages/node/7283858, which covers AIX 7.2, AIX 7.3, and PowerVM VIOS 4.1 - the input does not disclose an exact patched build string, so pull the precise APAR/interim-fix or service-pack level from that page rather than assuming a version. Prioritize VIOS instances and any AIX hosts exposing network services to untrusted segments. Until patching completes, reduce exposure by restricting network reachability to the affected service (host-based ipfilter/firewall rules or upstream ACLs limiting access to management/trusted subnets) and placing AIX and VIOS management interfaces on isolated administrative VLANs; the trade-off is that overly broad network restrictions can disrupt legitimate I/O virtualization or administrative traffic, so scope rules to the specific listening service and validate in a maintenance window.
The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which mak
Multiple unspecified vulnerabilities in the InfiniBand subsystem in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, a
IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the invscout c
IBM AIX contains an unspecified vulnerability that would allow a locally authenticated user to obtain root level privile
IBM AIX 5.3, 6.1, 7.1, and 7.2 contains an unspecified vulnerability that would allow a locally authenticated user to ob
IBM AIX 6.1, 7.1, and 7.2 could allow a local user to gain root privileges using a specially crafted command within the
lquerylv in cmdlvm in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x allows local users to gain privileges via a crafted DBGCM
libodm.a in IBM AIX 5.3, 6.1, and 7.1 allows local users to overwrite arbitrary files via a symlink attack on a temporar
libodm.a in IBM AIX 6.1 and 7.1, and VIOS 2.2.x, allows local users to overwrite arbitrary files via a symlink attack on
OS command injection in IBM AIX 7.2 and 7.3 and PowerVM VIOS 4.1 lets a remote, low-privileged authenticated attacker ru
OS command injection in IBM AIX 7.2 and 7.3 and in IBM PowerVM VIOS 4.1 lets a remote, authenticated attacker execute ar
OS command injection in IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 lets a remote authenticated attacker run arbitrary commands
Same weakness CWE-121 – Stack-based Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today