Wednesday, March 8, 2017

IBM Security Bulletin: Vulnerability in BIND impact AIX (CVE-2016-9131)

There is a vulnerability in BIND that impacts AIX.

CVE(s): CVE-2016-9131

Affected product(s) and affected version(s):

 AIX 5.3, 6.1, 7.1, 7.2
The following fileset levels are vulnerable:
key_fileset = aix
Fileset Lower Level Upper Level KEY ------------------------------------------------------------
bos.net.tcp.client 5.3.12.0 5.3.12.10 key_w_fs
bos.net.tcp.client 6.1.9.0 6.1.9.200 key_w_fs
bos.net.tcp.client 7.1.3.0 7.1.3.48 key_w_fs
bos.net.tcp.client 7.1.4.0 7.1.4.30 key_w_fs
bos.net.tcp.client_core 7.2.0.0 7.2.0.3 key_w_fs
bos.net.tcp.client_core 7.2.1.0 7.2.1.1 key_w_fs Note: To find out whether the affected filesets are installed on your systems, refer to the lslpp command found in AIX user's guide.
Example: lslpp -L | grep -i bos.net.tcp.client

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2hO4DLb
X-Force Database: http://ift.tt/2meUJFL

The post IBM Security Bulletin: Vulnerability in BIND impact AIX (CVE-2016-9131) appeared first on IBM PSIRT Blog.



from IBM Product Security Incident Response Team http://ift.tt/2lYgkAq

No comments:

Post a Comment

Note: Only a member of this blog may post a comment.