EUVD-2026-62872
GHSA-gvpr-6m55-ffxw
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Network-reachable service, low complexity, authenticated (PR:L) remote exploitation yielding full stack control; scope unchanged as impact is limited to the compromised partition.
Primary rating from Vendor (ibm).
CVSS VectorVendor: ibm
Lifecycle Timeline
2DescriptionCVE.org
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow.
AnalysisAI
Stack-based buffer overflow in IBM AIX 7.2 and 7.3 and IBM PowerVM VIOS 4.1 enables remote authenticated attackers to execute arbitrary code, achieving full compromise of confidentiality, integrity, and availability. The CVSS 8.8 score reflects low-complexity network exploitation requiring only low-privilege authentication (PR:L), making it accessible to any credentialed user on the system. No public exploit identified at time of analysis, but a vendor-released patch is available from IBM.
Technical ContextAI
CWE-121 (Stack-Based Buffer Overflow) describes a condition where user-controlled input is written beyond the bounds of a stack-allocated buffer, typically enabling overwrite of the saved return address and redirection of execution flow. IBM AIX is a proprietary UNIX operating system for IBM Power Systems hardware (CPE: cpe:2.3:a:ibm:aix:*:*:*:*:*:*:*:*), while IBM PowerVM VIOS (Virtual I/O Server) is the hypervisor partition facilitating virtualized I/O sharing between logical partitions (CPE: cpe:2.3:a:ibm:powervm_vios:*:*:*:*:*:*:*:*). The affected component is not specified in available data, but the network attack vector (AV:N) implies the vulnerable code is reachable via a networked service or daemon running on these platforms. The VIOS involvement is particularly significant as it underpins virtualized infrastructure sharing, meaning exploitation of a VIOS instance could affect multiple guest LPARs.
RemediationAI
Apply the vendor-released patch documented in IBM Security Advisory at https://www.ibm.com/support/pages/node/7283858. The exact fixed version numbers for AIX 7.2, AIX 7.3, and PowerVM VIOS 4.1 are not specified in available intelligence and must be confirmed directly from the IBM advisory. While awaiting patch deployment, consider restricting network access to AIX and VIOS management interfaces and networked daemons through host-based firewall rules (IPFilter on AIX) or perimeter controls, accepting the trade-off of potentially reduced service functionality. On PowerVM VIOS, reducing the number of accounts with any form of shell or network service access limits the PR:L exploitation surface. Audit existing service accounts and revoke unnecessary credentials as a compensating control.
The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which mak
Multiple unspecified vulnerabilities in the InfiniBand subsystem in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, a
IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the invscout c
IBM AIX contains an unspecified vulnerability that would allow a locally authenticated user to obtain root level privile
IBM AIX 5.3, 6.1, 7.1, and 7.2 contains an unspecified vulnerability that would allow a locally authenticated user to ob
IBM AIX 6.1, 7.1, and 7.2 could allow a local user to gain root privileges using a specially crafted command within the
lquerylv in cmdlvm in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x allows local users to gain privileges via a crafted DBGCM
libodm.a in IBM AIX 5.3, 6.1, and 7.1 allows local users to overwrite arbitrary files via a symlink attack on a temporar
libodm.a in IBM AIX 6.1 and 7.1, and VIOS 2.2.x, allows local users to overwrite arbitrary files via a symlink attack on
OS command injection in IBM AIX 7.2 and 7.3 and PowerVM VIOS 4.1 lets a remote, low-privileged authenticated attacker ru
OS command injection in IBM AIX 7.2 and 7.3 and in IBM PowerVM VIOS 4.1 lets a remote, authenticated attacker execute ar
OS command injection in IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 lets a remote authenticated attacker run arbitrary commands
Same weakness CWE-121 – Stack-based Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today