CVE-2018-1655

IBM AIX 5.3, 6.1, 7.1, and 7.2 contains a vulnerability in the rmsock command that may be used to expose kernel memory. IBM X-Force ID:…

4.0MediumCVSS base score
0.42%Exploitation in 30 daysEPSS · top 64% of all CVEs
NoKnown exploitednot in CISA's KEV catalog
NonePublic exploitsnone known yet

Description

IBM AIX 5.3, 6.1, 7.1, and 7.2 contains a vulnerability in the rmsock command that may be used to expose kernel memory. IBM X-Force ID: 144748.

Timeline

2017
13 Dec 2017
13 Dec 2017
ID reserved
By ibm
2018
22 Jun 20186 months later
22 Jun 2018· 6 months later
Published
2024
17 Sept 20246 years later
17 Sept 2024· 6 years later
Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2018-1655, by who scored it
Scored by	CVSS	Score	Vector
ibmCNA (assigner)	3.0	Medium4.0	CVSS:3.0/A:N/AC:L/AV:L/C:L/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O
NVDNVD · Modified	3.0	Medium5.5	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS (exploitation in 30 days): 0.42% · top 64% of all CVEs (10 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 4.0.

Affected products

IBM · AIX
- affected 6.1
- affected 5.3
- affected 7.1
- affected 7.2

References

1041166 (opens in a new tab)vdb-entryx_refsource_SECTRACKx_transferred
http://aix.software.ibm.com/aix/efixes/security/rmsock_advisory2.asc (opens in a new tab)x_refsource_CONFIRMx_transferred
ibm-aix-cve20181655-info-disc(144748) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
104542 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2018-1655](https://cveledger.app/badge/CVE-2018-1655.svg)](https://cveledger.app/cve/CVE-2018-1655)

Record last updated 17 Sept 2024, 01:31 UTC.