IBM Security Bulletin: Vulnerability in OpenSSH affects AIX (CVE-2017-15906)

Vulnerability in OpenSSH affects AIX.

CVE(s): CVE-2017-15906

Affected product(s) and affected version(s):

        AIX 5.3, 6.1, 7.1, 7.2
        VIOS 2.2.x

        The following fileset levels are vulnerable:

        key_fileset = osrcaix

        Fileset                 Lower Level   Upper Level    KEY
        -------------------------------------------------------------
        openssh.base.client     4.0.0.5200    7.1.102.1100   key_w_fs
        openssh.base.server     4.0.0.5200    7.1.102.1100   key_w_fs

        Note:  To determine if your system is vulnerable, execute the
        following commands:

        lslpp -L | grep -i openssh.base.client
        lslpp -L | grep -i openssh.base.server

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2zUr7Us
X-Force Database: http://ift.tt/2iUzVlD

The post IBM Security Bulletin: Vulnerability in OpenSSH affects AIX (CVE-2017-15906) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2izPFLj