CVE-2010-1124: High severity IBM AIX vulnerability

Published Mar 26, 2010

Updated

bos.rte.libc 5.3.9.4 on IBM AIX 5.3 does not properly support reading a certain address field after a successful getaddrinfo function call, which allows context-dependent attackers to cause a denial of service (application crash) via unspecified vectors, as demonstrated by IBM DB2 crashes on "systems with databases cataloged with alternate servers using IP addresses."

Affected Software

2 affected components

IBM AIX=5.3

IBM AIX=5.3.0

Event History

Mar 26, 2010

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Data Sourced

via NVD·06:30 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2010-1124?

The severity of CVE-2010-1124 is categorized as high due to its potential for causing denial of service through application crashes.

How do I fix CVE-2010-1124?

To fix CVE-2010-1124, apply the latest updates from IBM that address the vulnerabilities in the bos.rte.libc package.

Which systems are affected by CVE-2010-1124?

CVE-2010-1124 affects systems running IBM AIX version 5.3, including specific versions like 5.3.0.

What type of vulnerability is CVE-2010-1124?

CVE-2010-1124 is a denial of service vulnerability that can result in application crashes.

What are the potential impacts of CVE-2010-1124?

The potential impacts of CVE-2010-1124 include application crashes and service disruptions for dependent applications.