bk99.de entertain the web since 1997

bk99.de
hß · SecurityCurated

Security updates: root kernel hole threatens IBM’s AIX operating system

Summary

In 2021 IBM closed three holes in the AIX kernel, including CVE-2021-29801, through which a local user without privileges could gain root access. Two further medium-risk holes allowed the kernel to be crashed. IBM listed the fixed AIX and VIOS versions in an advisory.

Ideas

  • Proprietary Unix systems also have local kernel holes with root consequences.
  • Besides privilege escalation, kernel bugs can bring down the whole system.
  • The VIOS virtualisation layer was affected as well.

Insights

  • Local holes must be taken seriously on multi-user and application servers.
  • Few public details make your own risk assessment harder.

Facts

  • The root hole CVE-2021-29801 was rated “high”.
  • The DoS holes CVE-2021-29727 and CVE-2021-29862 were rated “medium”.

References

Critique

  • The report reproduces little more than the vendor’s brief description.

Recommendations

  • Apply security updates regularly on less frequently maintained Unix systems as well.
  • Restrict local logins on production servers to what is necessary.

Read the original article

Search the Web Archive

hß · 2025

Web hosting software cPanel: updates close security hole

In August 2025 the hosting control panel cPanel/WHM received updates for holes in bundled third-party software. Named were a prototype pollution hole in requirejs 2.3.6 (CVE-2024-38999) and a memory bug in SQLite before version 3.50.2 (CVE-2025-6965, CVSS 7.2). Branches 130, 128, 126, 118 and 110 were fixed.

hß · 2018

Updates close 19-year-old security hole in remote tool OpenSSH

In 2018 Qualys reported a hole in OpenSSH (CVE-2018-15473) that had existed since the first version in 1999. With prepared packets, attackers could check remotely whether a user name exists, because the server ended the connection differently for valid names. The hole was not considered critical but provided material for targeted password attacks.

hß · 2010

Root privileges through Linux kernel bug [Update]

In 2010 Rafal Wojtczuk described a problem in Linux memory management in which the stack and shared memory segments could grow into each other. Using the X server as an example, Wojtczuk showed how an attacker could overwrite return addresses on the stack by writing to the shared memory and gain root privileges. The fix, a guard page between the stack and other areas, came in 2.6.32.19, 2.6.34.4 and 2.6.35.2, although SUSE had offered a fix as early as 2004.