CVE Vulnerabilities

CVE-2021-38917

Published: Dec 10, 2021 | Modified: Nov 21, 2024
CVSS 3.x
9.1
CRITICAL
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS 2.x
9.4 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:N
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

IBM PowerVM Hypervisor FW860, FW940, and FW950 could allow an attacker that gains service access to the FSP can read and write arbitrary host system memory through a series of carefully crafted service procedures. IBM X-Force ID: 210018.

Affected Software

NameVendorStart VersionEnd Version
Powervm_hypervisorIbmfw860 (including)fw860 (including)
Powervm_hypervisorIbmfw940 (including)fw940 (including)
Powervm_hypervisorIbmfw950 (including)fw950 (including)

References