CVE-2008-1594
First published: Mon Mar 31 2008(Updated: )
The kernel in IBM AIX 5.2 and 5.3 does not properly handle resizing JFS2 filesystems on concurrent volume groups spread across multiple nodes, which allows local users of one node to cause a denial of service (remote node crash) by using chfs or lreducelv to reduce a filesystem's size.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM AIX | =5.3 | |
| IBM AIX | =5.2 | |
| IBM AIX | =6.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4153
- http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4154
- http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4155
- http://www.ibm.com/support/docview.wss?uid=isg1IZ04946
- http://www.ibm.com/support/docview.wss?uid=isg1IZ04953
- http://www.ibm.com/support/docview.wss?uid=isg1IZ05246
- http://www.securityfocus.com/bid/28467
- http://securitytracker.com/id?1019606
- http://www.vupen.com/english/advisories/2008/0865
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5434
Frequently Asked Questions
What is the severity of CVE-2008-1594?
CVE-2008-1594 is classified as a denial of service vulnerability affecting IBM AIX systems.
How do I fix CVE-2008-1594?
To mitigate CVE-2008-1594, ensure that your AIX systems are updated with the latest patches provided by IBM.
What versions of AIX are affected by CVE-2008-1594?
CVE-2008-1594 affects IBM AIX versions 5.2, 5.3, and 6.1.
Who can be impacted by CVE-2008-1594?
Local users on one node can perform actions that trigger a denial of service on a remote node due to CVE-2008-1594.
What are the consequences of CVE-2008-1594 exploitation?
Exploitation of CVE-2008-1594 can lead to a remote node crash, resulting in service unavailability.
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/author
- agent/last-modified-date
- agent/weakness
- agent/remedy
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/ibm
- canonical/ibm aix
- version/ibm aix/5.3
- version/ibm aix/5.2
- version/ibm aix/6.1