VulnerabilityModified
CVE-2012-0194
The TCP implementation in IBM AIX 5.3, 6.1, and 7.1, when the Large Send Offload option is enabled, allows remote attackers to cause a denial of service (assertion failure and panic) via an unspecified series of packets.
HIGH 7.1EPSS 3.02%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (3.02%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
The TCP implementation in IBM AIX 5.3, 6.1, and 7.1, when the Large Send Offload option is enabled, allows remote attackers to cause a denial of service (assertion failure and panic) via an unspecified series of packets.
- CVSS 2.0
- 7.1 HIGHAV:N/AC:M/Au:N/C:N/I:N/A:C
- EPSS
- 3.02% probability · 87th percentile
- CISA KEV
- Not listed
- Affected
- ibm/aix
- Source
- psirt@us.ibm.com
References
- http://aix.software.ibm.com/aix/efixes/security/large_send_advisory.ascPatch, Vendor Advisory
- http://secunia.com/advisories/47865Vendor Advisory
- http://securitytracker.com/id?1026640
- http://www.ibm.com/support/docview.wss?uid=isg1IV13751
- http://www.ibm.com/support/docview.wss?uid=isg1IV13820
- http://www.ibm.com/support/docview.wss?uid=isg1IV13827
- http://www.ibm.com/support/docview.wss?uid=isg1IV14209
- http://www.ibm.com/support/docview.wss?uid=isg1IV14210
- http://www.ibm.com/support/docview.wss?uid=isg1IV14211
- http://www.securityfocus.com/bid/51864
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72562
- http://aix.software.ibm.com/aix/efixes/security/large_send_advisory.ascPatch, Vendor Advisory
- http://secunia.com/advisories/47865Vendor Advisory
- http://securitytracker.com/id?1026640
- http://www.ibm.com/support/docview.wss?uid=isg1IV13751
- http://www.ibm.com/support/docview.wss?uid=isg1IV13820
- http://www.ibm.com/support/docview.wss?uid=isg1IV13827
- http://www.ibm.com/support/docview.wss?uid=isg1IV14209
- http://www.ibm.com/support/docview.wss?uid=isg1IV14210
- http://www.ibm.com/support/docview.wss?uid=isg1IV14211
- http://www.securityfocus.com/bid/51864
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72562
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.