IBM Security Bulletin: Multiple Vulnerabilities in tcpdump affect AIX

There are multiple vulnerabilities in tcpdump that impact AIX.

CVE(s): CVE-2016-7922, CVE-2016-7923, CVE-2016-7924, CVE-2016-7925, CVE-2016-7926, CVE-2016-7927, CVE-2016-7928, CVE-2016-7930, CVE-2016-7931, CVE-2016-7932, CVE-2016-7933, CVE-2016-7934, CVE-2016-7935, CVE-2016-7936, CVE-2016-7937, CVE-2016-7939, CVE-2016-7940, CVE-2016-7973, CVE-2016-7974, CVE-2016-7975, CVE-2016-7983, CVE-2016-7984, CVE-2016-7992, CVE-2016-7993, CVE-2016-8574, CVE-2016-8575, CVE-2017-5202, CVE-2017-5203, CVE-2017-5204, CVE-2017-5482, CVE-2017-5483, CVE-2017-5484, CVE-2017-5485, CVE-2017-5486

Affected product(s) and affected version(s):

AIX  5.3, 6.1, 7.1, 7.2
        
  The following fileset levels are vulnerable:
        
  key_fileset = aix
        
  Fileset             Lower Level  Upper Level   KEY
  -----------------------------------------------------
  bos.net.tcp.server   5.3.12.0     5.3.12.6    key_w_fs
  bos.net.tcp.server   6.1.9.0      6.1.9.201   key_w_fs
  bos.net.tcp.server   7.1.3.0      7.1.3.49    key_w_fs
  bos.net.tcp.server   7.1.4.0      7.1.4.31    key_w_fs
  bos.net.tcp.tcpdump  7.2.0.0      7.2.0.2     key_w_fs
  bos.net.tcp.tcpdump  7.2.1.0      7.2.1.0     key_w_fs
        
   
  Note: To find out whether the affected filesets are installed 
  on your systems, refer to the lslpp command found in AIX user's
  guide.

  Example:  lslpp -L | grep -i bos.net.tcp.server

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2sjdlpI
X-Force Database: http://ift.tt/2rl8SWu
X-Force Database: http://ift.tt/2ovoaWw
X-Force Database: http://ift.tt/2rkOxR2
X-Force Database: http://ift.tt/2rziyKC
X-Force Database: http://ift.tt/2pxDsbe
X-Force Database: http://ift.tt/2ovNnQP
X-Force Database: http://ift.tt/2pxjOMu
X-Force Database: http://ift.tt/2rkZ7aF
X-Force Database: http://ift.tt/2rz7HA8
X-Force Database: http://ift.tt/2rkUw8r
X-Force Database: http://ift.tt/2rkTrxi
X-Force Database: http://ift.tt/2ovhS9A
X-Force Database: http://ift.tt/2pxBQOx
X-Force Database: http://ift.tt/2ovyPRj
X-Force Database: http://ift.tt/2rzaBFd
X-Force Database: http://ift.tt/2rlG40e
X-Force Database: http://ift.tt/2ryUEPn
X-Force Database: http://ift.tt/2rlG4xg
X-Force Database: http://ift.tt/2pxnCx0
X-Force Database: http://ift.tt/2ovtjxL
X-Force Database: http://ift.tt/2rziquw
X-Force Database: http://ift.tt/2rlXkCr
X-Force Database: http://ift.tt/2rz80uN
X-Force Database: http://ift.tt/2pxnvlj
X-Force Database: http://ift.tt/2rz4wIO
X-Force Database: http://ift.tt/2rl1F8C
X-Force Database: http://ift.tt/2rlG6oS
X-Force Database: http://ift.tt/2ryNwCD
X-Force Database: http://ift.tt/2ovpwRm
X-Force Database: http://ift.tt/2rkT5Xo
X-Force Database: http://ift.tt/2pxuElB
X-Force Database: http://ift.tt/2rlAA5C
X-Force Database: http://ift.tt/2rz3vjM
X-Force Database: http://ift.tt/2rlQbCk

The post IBM Security Bulletin: Multiple Vulnerabilities in tcpdump affect AIX appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2rldTht