CVE-2014-0930: Medium severity IBM VIOS vulnerability

Published May 8, 2014

Updated

The ptrace system call in IBM AIX 5.3, 6.1, and 7.1, and VIOS 2.2.x, allows local users to cause a denial of service (system crash) or obtain sensitive information from kernel memory via a crafted PTLDINFO operation.

Affected Software

13 affected components

IBM VIOS=2.2.0.10

IBM VIOS=2.2.0.11

IBM VIOS=2.2.0.12

IBM VIOS=2.2.0.13

IBM VIOS=2.2.1.0

IBM VIOS=2.2.1.1

IBM VIOS=2.2.1.3

IBM VIOS=2.2.1.4

IBM VIOS=2.2.2.0

IBM VIOS=2.2.3.0

IBM AIX=5.3

IBM AIX=6.1

IBM AIX=7.1

Event History

May 8, 2014

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Data Sourced

via NVD·10:55 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2014-0930?

CVE-2014-0930 is categorized as a moderate severity vulnerability, allowing local users to cause a denial of service or access sensitive kernel memory.

How do I fix CVE-2014-0930?

To fix CVE-2014-0930, apply the latest patches or updates provided by IBM for affected AIX and VIOS versions.

What software is affected by CVE-2014-0930?

CVE-2014-0930 affects IBM AIX versions 5.3, 6.1, 7.1 and VIOS versions 2.2.0.10 to 2.2.3.0.

What specific threats does CVE-2014-0930 pose?

CVE-2014-0930 can result in a system crash or unauthorized access to sensitive information in the kernel memory.

Is CVE-2014-0930 a remote or local vulnerability?

CVE-2014-0930 is a local vulnerability that can only be exploited by users with local access to the system.