IBM Support

IJ00566: FIX MULTIPLE TCPDUMP CVES FROM 9/11/2017 APPLIES TO AIX 7200-00

A fix is available

Obtain the fix for this APAR.

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • Multiple vulnerabilities were reported in Tcpdump. A remote
user can execute arbitrary code on the target system. A remote
user can cause denial of service conditions on the target
system. A remote user can obtain potentially sensitive
information on the target system.

Local fix

  • 



Problem summary


    

  • Multiple vulnerabilities were reported in Tcpdump. A remote
user can execute arbitrary code on the target system. A remote
user can cause denial of service conditions on the target
system. A remote user can obtain potentially sensitive
information on the target system.

    



Problem conclusion


    

  • Upgrade tcpdump to version 4.9.2.

    



Temporary fix


    

  • 



Comments


    

  • 6100-09 - use AIX APAR IJ00563
6100-09 - use AIX APAR IJ00563
7100-04 - use AIX APAR IJ00565
7100-05 - use AIX APAR IJ01081
7200-00 - use AIX APAR IJ00566
7200-01 - use AIX APAR IJ00567
7200-02 - use AIX APAR IJ01017

    



APAR Information




    

  • APAR number
    IJ00566
    • 

  • Reported component name
    AIX V7.2
    • 

  • Reported component ID
    5765CD200
    • 

  • Reported release
    720
    • 

  • Status
    CLOSED  PER
    • 

  • PE
    NoPE
    • 

  • HIPER
    NoHIPER
    • 

  • Submitted date
    2017-10-06
    • 

  • Closed date
    2017-10-12
    • 

  • Last modified date
    2018-09-21
    • 





    

  • APAR is sysrouted FROM one or more of the following:
    

    
IJ00563
    

    • 

  • APAR is sysrouted TO one or more of the following:
    

    • 



Fix information


    

  • Fixed component name
    AIX V7.2
    • 

  • Fixed component ID
    5765CD200
    • 



Applicable component levels


    

  • R720  PSY  U877341
       UP18/05/01  I  1000
    • 



PTF to Fileset Mapping








      
              
                            

              

              [{"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SSVEF8","label":"AIX 7.2 Enterprise Edition"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"720","Edition":"","Line of Business":{"code":"LOB08","label":"Cognitive Systems"}},{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG11S","label":"AIX 7.2 HIPERS, APARs and Fixes"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"720","Edition":"","Line of Business":{"code":"","label":""}}]
              

                          

          
 
        

      

    

      

        

          

            
Document Information


            

            


                        

            Modified date:
            

            21 September 2018
            

            
                      

        


        

        


      

    

  



    

  

  
    
            

          
Page Feedback