CVE Vulnerabilities

CVE-2021-38917

Published: Dec 10, 2021 | Modified: Dec 14, 2021
CVSS 3.x
9.1
CRITICAL
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS 2.x
9.4 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:N
RedHat/V2
RedHat/V3
Ubuntu

IBM PowerVM Hypervisor FW860, FW940, and FW950 could allow an attacker that gains service access to the FSP can read and write arbitrary host system memory through a series of carefully crafted service procedures. IBM X-Force ID: 210018.

Affected Software

Name Vendor Start Version End Version
Powervm_hypervisor Ibm fw860 (including) fw860 (including)
Powervm_hypervisor Ibm fw940 (including) fw940 (including)
Powervm_hypervisor Ibm fw950 (including) fw950 (including)

References