2 lines
3.5 KiB
JSON
2 lines
3.5 KiB
JSON
{"affected":[{"affectedData":[{"cpes":["cpe:2.3:o:ibm:power9_system_firmware:fw1050.00:*:*:*:*:*:*:*","cpe:2.3:o:ibm:power9_system_firmware:fw1050.30:*:*:*:*:*:*:*","cpe:2.3:o:ibm:power9_system_firmware:fw1060.00:*:*:*:*:*:*:*","cpe:2.3:o:ibm:power9_system_firmware:fw1060.20:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"PowerVM Hypervisor","vendor":"IBM","versions":[{"lessThanOrEqual":"FW1050.30","status":"affected","version":"FW1050.00","versionType":"semver"},{"lessThanOrEqual":"FW1060.20","status":"affected","version":"FW1060.00","versionType":"semver"}]}],"source":"psirt@us.ibm.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:ibm:powervm_hypervisor:*:*:*:*:*:*:*:*","matchCriteriaId":"AB37EE36-AE79-448C-B458-809DC8D3B7B4","versionEndIncluding":"fw1050.30","versionStartIncluding":"fw1050.00","vulnerable":true},{"criteria":"cpe:2.3:o:ibm:powervm_hypervisor:*:*:*:*:*:*:*:*","matchCriteriaId":"57A89606-A01A-423E-872D-92052609B957","versionEndIncluding":"fw1060.20","versionStartIncluding":"fw1060.00","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:ibm:powervm_hypervisor:-:*:*:*:*:*:*:*","matchCriteriaId":"60C28326-3EFE-4CD0-91E9-682AD6B0B891","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"IBM PowerVM Hypervisor FW1050.00 through FW1050.30 and FW1060.00 through FW1060.20 could allow a local user, under certain Linux processor combability mode configurations, to cause undetected data loss or errors when performing gzip compression using HW acceleration."},{"lang":"es","value":"IBM PowerVM Hypervisor FW1050.00 a FW1050.30 y FW1060.00 a FW1060.20 podrían permitir que un usuario local, bajo ciertas configuraciones del modo de compatibilidad del procesador Linux, cause pérdida de datos no detectados o errores al realizar la compresión gzip utilizando aceleración de hardware."}],"id":"CVE-2025-0986","lastModified":"2026-06-17T08:27:28.740","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"LOCAL","availabilityImpact":"LOW","baseScore":4.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:L","version":"3.1"},"exploitabilityScore":1.4,"impactScore":2.7,"source":"psirt@us.ibm.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"LOW","baseScore":4.4,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","version":"3.1"},"exploitabilityScore":1.8,"impactScore":2.5,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-0986","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2025-03-28T13:52:45.513632Z","version":"2.0.3"}}]},"published":"2025-03-28T14:15:19.357","references":[{"source":"psirt@us.ibm.com","tags":["Vendor Advisory"],"url":"https://www.ibm.com/support/pages/node/7229349"}],"sourceIdentifier":"psirt@us.ibm.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-409"}],"source":"psirt@us.ibm.com","type":"Secondary"},{"description":[{"lang":"en","value":"NVD-CWE-noinfo"}],"source":"nvd@nist.gov","type":"Primary"}]}
|