IBM Security Bulletin: Vulnerability in tcpdump affects AIX (CVE-2018-19519) Security Bulletin

There is a vulnerability in tcpdump that affects AIX.

CVE(s): CVE-2018-19519

Affected product(s) and affected version(s):
AIX 7.1, 7.2 VIOS 2.2.x
The following fileset levels are vulnerable:

key_fileset = aix
Fileset Lower Level Upper Level KEY
———————————————————
bos.net.tcp.server 6.1.9.0 6.1.9.400 key_w_fs
bos.net.tcp.server 7.1.4.0 7.1.4.34 key_w_fs
bos.net.tcp.server 7.1.5.0 7.1.5.31 key_w_fs
bos.net.tcp.tcpdump 7.2.1.0 7.2.1.3 key_w_fs
bos.net.tcp.tcpdump 7.2.2.0 7.2.2.16 key_w_fs
bos.net.tcp.tcpdump 7.2.3.0 7.2.3.15 key_w_fs

To find out whether the affected filesets are installed on your systems, refer to the lslpp command found in AIX user’s guide.
Example: lslpp -L | grep -i bos.net.tcp.server

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: https://www-01.ibm.com/support/docview.wss?uid=ibm10873086
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/153314

The post IBM Security Bulletin: Vulnerability in tcpdump affects AIX (CVE-2018-19519) Security Bulletin appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ift.tt/2XprdiI