What’s Vulnerable › Vulnerabilities

CVE-2013-4011

• Severity: high (CVSS 7.2 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2013-07-18 · updated 2026-06-16

Description

Multiple unspecified vulnerabilities in the InfiniBand subsystem in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, allow local users to gain privileges via vectors involving (1) arp.ib or (2) ibstat.

Affected products

• IBM AIX: 6.1, 7.1
• IBM VIOS: 2.2.2.2-fp-26_sp-02

References

• http://aix.software.ibm.com/aix/efixes/security/infiniband_advisory.asc
• http://osvdb.org/95419
• http://osvdb.org/95420
• http://secunia.com/advisories/54215
• http://www.ibm.com/support/docview.wss?uid=isg1IV43561
• http://www.ibm.com/support/docview.wss?uid=isg1IV43562
• http://www.ibm.com/support/docview.wss?uid=isg1IV43580
• http://www.ibm.com/support/docview.wss?uid=isg1IV43582
• http://www.ibm.com/support/docview.wss?uid=isg1IV43756
• http://www.ibm.com/support/docview.wss?uid=isg1IV43827
• http://www.securityfocus.com/bid/61287
• http://www.securitytracker.com/id/1028792

Get alerted when CVE-2013-4011 or the next vulnerability affects your stack