CVEvulnerability

CVE-2023-30440

7.9 HIGH Published 2023-05-23 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-05-23
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:H
CVSS 3.1 ([email protected])
7.9 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:H
Weaknesses
CWE-20

Description

IBM PowerVM Hypervisor FW860.00 through FW860.B3, FW950.00 through FW950.70, FW1010.00 through FW1010.50, FW1020.00 through FW1020.30, and FW1030.00 through FW1030.10 could allow a local attacker with control a partition that has been assigned SRIOV virtual function (VF) to cause a denial of service to a peer partition or arbitrary data corruption. IBM X-Force ID: 253175.

Affected configurations

• ibm powervm hypervisor (>= fw860 <= fw860.b3) • ibm powervm hypervisor (>= fw950 <= fw950.70) • ibm powervm hypervisor (>= fw1010 <= fw1010.50) • ibm powervm hypervisor (>= fw1020.00 <= fw1020.30) • ibm powervm hypervisor (>= fw1030.00 <= fw1030.10)

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References