[SingCERT] IBM AIX ‘FC SCSI’ Protocol Driver Denial of Service Vulnerability

Last Updated on Monday, 24 January 2011 10:40

[ Summary ]

IBM AIX is prone to a denial-of-service vulnerability.

Fixes are available.

[ Affected Systems ]

IBM AIX 6.1 cpe:/o:ibm:aix:6.1 NVD

other versions may also be affected.

[ Impact Analysis ]

IBM AIX is an open standards-based UNIX operating system.

IBM AIX is prone to a denial-of-service vulnerability. Specifically, this issue occurs due to an error in the ‘FC SCSI’ protocol driver while deallocating a timer.

Exploits will cause the system to crash, denying service to legitimate users.

[ Solution/Workaround ]

Vendor updates are available. Please see the references for more information.

[ Reference ]

• https://www-304.ibm.com/support/docview.wss?uid=isg1IZ92478
• http://www-03.ibm.com/systems/power/software/aix/v61/index.html