AIX OpenSSL Vulnerability Advisory: CVE-2014-0224, 0221, 0195, 0198, 3470 Patch Guide

Vulnerability Summary 1. AIX OpenSSL SSL/TLS Man-in-the-Middle (MITM) Vulnerability CVE ID: CVE-2014-0224 CVSS Base Score: 5.8 (Medium) Description: Attackers can exploit a man-in-the-middle position to force weak key material, leading to data decryption and tampering. Affected Platforms: AIX 5.3, 6.1, 7.1, VIOS 2.2. Remediation: Apply official patch Reboot Required: No 2. AIX OpenSSL DTLS Recursion Vulnerability CVE ID: CVE-2014-0221 CVSS Base Score: 4.3 (Medium) Description: Attackers can trigger invalid DTLS handshakes causing recursive code execution, leading to crashes. Affected Platforms: AIX 5.3, 6.1, 7.1, VIOS 2.2. Remediation: Apply patch Reboot Required: No 3. AIX OpenSSL DTLS Invalid Fragment Vulnerability CVE ID: CVE-2014-0195 CVSS Base Score: 7.5 (High) Description: Invalid DTLS fragments cause buffer overflow, enabling arbitrary code execution. Affected Platforms: AIX 5.3, 6.1, 7.1, VIOS 2.2. Remediation: Apply patch Reboot Required: No 4. AIX OpenSSL SSL_MODE_RELEASE_BUFFERS NULL Pointer Dereference CVE ID: CVE-2014-0198 CVSS Base Score: 4.3 (Medium) Description: Attackers can cause DoS by exploiting NULL pointer dereference in do_ssl3_write function. Affected Platforms: AIX 5.3, 6.1, 7.1, VIOS 2.2. Remediation: Apply patch Reboot Required: No 5. AIX OpenSSL Anonymous ECDH Denial of Service CVE ID: CVE-2014-3470 CVSS Base Score: 4.3 (Medium) Description: Attackers can exploit anonymous ECDH cipher suites to cause DoS. Affected Platforms: AIX 5.3, 6.1, 7.1, VIOS 2.2. Remediation: Apply patch Reboot Required**: No Remediation Download and install official patches for each vulnerability as per instructions. It is recommended to back up the system before installation. Additional Information No immediate temporary workaround available. Contact IBM AIX Support Center or visit IBM Support Portal for further information and assistance.

Goal Reached Thanks to every supporter — we hit 100%!

AIX OpenSSL Vulnerability Advisory: CVE-2014-0224, 0221, 0195, 0198, 3470 Patch Guide