CVE-2008-1594: Medium severity ibm aix vulnerability

Published Mar 31, 2008

Updated

The kernel in IBM AIX 5.2 and 5.3 does not properly handle resizing JFS2 filesystems on concurrent volume groups spread across multiple nodes, which allows local users of one node to cause a denial of service (remote node crash) by using chfs or lreducelv to reduce a filesystem's size.

Affected Software

3 affected components

IBM AIX=5.3

IBM AIX=5.2

IBM AIX=6.1

Remediation

Patch Available

http://www.securityfocus.com/bid/28467

Event History

Mar 31, 2008

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-1594?

CVE-2008-1594 is classified as a denial of service vulnerability affecting IBM AIX systems.

How do I fix CVE-2008-1594?

To mitigate CVE-2008-1594, ensure that your AIX systems are updated with the latest patches provided by IBM.

What versions of AIX are affected by CVE-2008-1594?

CVE-2008-1594 affects IBM AIX versions 5.2, 5.3, and 6.1.

Who can be impacted by CVE-2008-1594?

Local users on one node can perform actions that trigger a denial of service on a remote node due to CVE-2008-1594.

What are the consequences of CVE-2008-1594 exploitation?

Exploitation of CVE-2008-1594 can lead to a remote node crash, resulting in service unavailability.