CVE Vulnerabilities

CVE-2014-8904

Published: Jan 15, 2015 | Modified: Nov 21, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.2 HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

lquerylv in cmdlvm in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x allows local users to gain privileges via a crafted DBGCMD_LQUERYLV environment-variable value.

Affected Software

Name Vendor Start Version End Version
Vios Ibm 2.2.0.10 (including) 2.2.0.10 (including)
Vios Ibm 2.2.0.11 (including) 2.2.0.11 (including)
Vios Ibm 2.2.0.12 (including) 2.2.0.12 (including)
Vios Ibm 2.2.0.13 (including) 2.2.0.13 (including)
Vios Ibm 2.2.1.0 (including) 2.2.1.0 (including)
Vios Ibm 2.2.1.1 (including) 2.2.1.1 (including)
Vios Ibm 2.2.1.3 (including) 2.2.1.3 (including)
Vios Ibm 2.2.1.4 (including) 2.2.1.4 (including)
Vios Ibm 2.2.1.5 (including) 2.2.1.5 (including)
Vios Ibm 2.2.1.6 (including) 2.2.1.6 (including)
Vios Ibm 2.2.1.7 (including) 2.2.1.7 (including)
Vios Ibm 2.2.1.8 (including) 2.2.1.8 (including)
Vios Ibm 2.2.1.9 (including) 2.2.1.9 (including)
Vios Ibm 2.2.2.0 (including) 2.2.2.0 (including)
Vios Ibm 2.2.2.1 (including) 2.2.2.1 (including)
Vios Ibm 2.2.2.2 (including) 2.2.2.2 (including)
Vios Ibm 2.2.2.3 (including) 2.2.2.3 (including)
Vios Ibm 2.2.2.4 (including) 2.2.2.4 (including)
Vios Ibm 2.2.2.5 (including) 2.2.2.5 (including)
Vios Ibm 2.2.3.0 (including) 2.2.3.0 (including)
Vios Ibm 2.2.3.1 (including) 2.2.3.1 (including)
Vios Ibm 2.2.3.2 (including) 2.2.3.2 (including)
Vios Ibm 2.2.3.3 (including) 2.2.3.3 (including)
Vios Ibm 2.2.3.4 (including) 2.2.3.4 (including)

References