VulnerabilityModified
CVE-2016-0281
The mustendd driver in IBM AIX 5.3, 6.1, 7.1, and 7.2 and VIOS 2.2.x, when the jumbo_frames feature is not enabled, allows remote attackers to cause a denial of service (FC1763 or FC5899 adapter crash) via crafted packets.
LOW 3.7EPSS 8.42%
Does this matter?
Lower severity and a low EPSS score (8.42%). Track it; it rarely justifies an emergency change on its own.
Description
The mustendd driver in IBM AIX 5.3, 6.1, 7.1, and 7.2 and VIOS 2.2.x, when the jumbo_frames feature is not enabled, allows remote attackers to cause a denial of service (FC1763 or FC5899 adapter crash) via crafted packets.
- CVSS 3.0
- 3.7 LOWCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
- EPSS
- 8.42% probability · 95th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- ibm/aix · ibm/vios
- Source
- psirt@us.ibm.com
References
- http://aix.software.ibm.com/aix/efixes/security/mustendd_advisory.ascVendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV80569Broken Link
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV81357Broken Link
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV81459Broken Link
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV82421Broken Link
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV84184Broken Link
- http://www.securityfocus.com/bid/92193
- http://www.securitytracker.com/id/1036481
- http://aix.software.ibm.com/aix/efixes/security/mustendd_advisory.ascVendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV80569Broken Link
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV81357Broken Link
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV81459Broken Link
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV82421Broken Link
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV84184Broken Link
- http://www.securityfocus.com/bid/92193
- http://www.securitytracker.com/id/1036481
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.