CVE-2012-0723

Published: Jul 30, 2012Modified: Apr 29, 2026

4.9

Vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 3.9 / Impact: 6.9

Source: NVD

Description

The kernel in IBM AIX 5.3, 6.1, and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, does not properly implement the dupmsg system call, which allows local users to cause a denial of service (system crash) via a crafted application.

Affected (4)

Products: Ibm: Aix, Vios

Ibm

2 products

Aix

Vios

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Ibm Aix	Version 5.3
Ibm Aix	Version 6.1
Ibm Aix	Version 7.1
Ibm Vios	Version 2.2.1.4 fp-25_sp-02

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (16)

http://aix.software.ibm.com/aix/efixes/security/syscall_advisory.asc

Source: psirt@us.ibm.com

Vendor Advisory

http://www.ibm.com/support/docview.wss?uid=isg1IV22693

Source: psirt@us.ibm.com

http://www.ibm.com/support/docview.wss?uid=isg1IV22694

Source: psirt@us.ibm.com

http://www.ibm.com/support/docview.wss?uid=isg1IV22695

Source: psirt@us.ibm.com

http://www.ibm.com/support/docview.wss?uid=isg1IV22696

Source: psirt@us.ibm.com

http://www.ibm.com/support/docview.wss?uid=isg1IV22697

Source: psirt@us.ibm.com

http://www.securitytracker.com/id?1027315

Source: psirt@us.ibm.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/74134

Source: psirt@us.ibm.com

http://aix.software.ibm.com/aix/efixes/security/syscall_advisory.asc