IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in a hypervisor call interface. An attacker with root access to a guest partition can read a limited amount of hypervisor memory, potentially exposing sensitive data belonging to the hypervisor or other guest partitions hosted on the same system, resulting in a confidentiality impact. The attacker has no control over which memory contents are returned.
This vulnerability is of particular concern in multi-tenant environments where guests may run arbitrary OS images.
Attack Parameters
Attack Vector
Local
Requires local access
Attack Complexity
Low
Easy to exploit
Privileges Required
High
Admin privileges needed
User Interaction
None
No user interaction needed
Impact Assessment
Confidentiality
Low
Partial data leak
Integrity
None
No data modification
Availability
None
No disruption
CVSS Vector v3.1
Weakness Type (CWE)
Vulnerable Products 46
| Configuration | From (including) | Up to (excluding) |
|---|---|---|
|
Ibm Power_System_S1122_\(9824-22a\)_Firmware
cpe:2.3:o:ibm:power_system_s1122_\(9824-22a\)_firmware:*:*:*:*:*:*:*:*
|
fw1110.00
|
fw1110.32
|
|
Ibm Power_System_S1122_\(9824-22a\)_Firmware
cpe:2.3:o:ibm:power_system_s1122_\(9824-22a\)_firmware:*:*:*:*:*:*:*:*
|
fw1120.00
|
fw1120.02
|
|
Ibm Power_System_S1122_\(9824-22a\)
cpe:2.3:h:ibm:power_system_s1122_\(9824-22a\):-:*:*:*:*:*:*:*
|
— | — |
|
Ibm Power_System_S1124_\(9824-42a\)_Firmware
cpe:2.3:o:ibm:power_system_s1124_\(9824-42a\)_firmware:*:*:*:*:*:*:*:*
|
fw1110.00
|
fw1110.32
|
|
Ibm Power_System_S1124_\(9824-42a\)_Firmware
cpe:2.3:o:ibm:power_system_s1124_\(9824-42a\)_firmware:*:*:*:*:*:*:*:*
|
fw1120.00
|
fw1120.02
|
|
Ibm Power_System_S1124_\(9824-42a\)
cpe:2.3:h:ibm:power_system_s1124_\(9824-42a\):-:*:*:*:*:*:*:*
|
— | — |
|
Ibm Power_System_S1122s_\(9824-22b\)_Firmware
cpe:2.3:o:ibm:power_system_s1122s_\(9824-22b\)_firmware:*:*:*:*:*:*:*:*
|
fw1110.00
|
fw1110.32
|
|
Ibm Power_System_S1122s_\(9824-22b\)_Firmware
cpe:2.3:o:ibm:power_system_s1122s_\(9824-22b\)_firmware:*:*:*:*:*:*:*:*
|
fw1120.00
|
fw1120.02
|
|
Ibm Power_System_S1122s_\(9824-22b\)
cpe:2.3:h:ibm:power_system_s1122s_\(9824-22b\):-:*:*:*:*:*:*:*
|
— | — |
|
Ibm Power_System_S1114_\(9824-41b\)_Firmware
cpe:2.3:o:ibm:power_system_s1114_\(9824-41b\)_firmware:*:*:*:*:*:*:*:*
|
fw1110.00
|
fw1110.32
|
|
Ibm Power_System_S1114_\(9824-41b\)_Firmware
cpe:2.3:o:ibm:power_system_s1114_\(9824-41b\)_firmware:*:*:*:*:*:*:*:*
|
fw1120.00
|
fw1120.02
|
|
Ibm Power_System_S1114_\(9824-41b\)
cpe:2.3:h:ibm:power_system_s1114_\(9824-41b\):-:*:*:*:*:*:*:*
|
— | — |
|
Ibm Power_System_L1122_\(9856-22h\)_Firmware
cpe:2.3:o:ibm:power_system_l1122_\(9856-22h\)_firmware:*:*:*:*:*:*:*:*
|
fw1110.00
|
fw1110.32
|
|
Ibm Power_System_L1122_\(9856-22h\)_Firmware
cpe:2.3:o:ibm:power_system_l1122_\(9856-22h\)_firmware:*:*:*:*:*:*:*:*
|
fw1120.00
|
fw1120.02
|
|
Ibm Power_System_L1122_\(9856-22h\)
cpe:2.3:h:ibm:power_system_l1122_\(9856-22h\):-:*:*:*:*:*:*:*
|
— | — |
|
Ibm Power_System_L1124_\(9856-42h\)_Firmware
cpe:2.3:o:ibm:power_system_l1124_\(9856-42h\)_firmware:*:*:*:*:*:*:*:*
|
fw1110.00
|
fw1110.32
|
|
Ibm Power_System_L1124_\(9856-42h\)_Firmware
cpe:2.3:o:ibm:power_system_l1124_\(9856-42h\)_firmware:*:*:*:*:*:*:*:*
|
fw1120.00
|
fw1120.02
|
|
Ibm Power_System_L1124_\(9856-42h\)
cpe:2.3:h:ibm:power_system_l1124_\(9856-42h\):-:*:*:*:*:*:*:*
|
— | — |
|
Ibm Power_System_E1150_\(9043-Mru\)_Firmware
cpe:2.3:o:ibm:power_system_e1150_\(9043-mru\)_firmware:*:*:*:*:*:*:*:*
|
fw1110.00
|
fw1110.32
|
|
Ibm Power_System_E1150_\(9043-Mru\)_Firmware
cpe:2.3:o:ibm:power_system_e1150_\(9043-mru\)_firmware:*:*:*:*:*:*:*:*
|
fw1120.00
|
fw1120.02
|
|
Ibm Power_System_E1150_\(9043-Mru\)
cpe:2.3:h:ibm:power_system_e1150_\(9043-mru\):-:*:*:*:*:*:*:*
|
— | — |
|
Ibm Power_System_S1112_\(9242-21b\)_Firmware
cpe:2.3:o:ibm:power_system_s1112_\(9242-21b\)_firmware:*:*:*:*:*:*:*:*
|
fw1120.00
|
fw1120.02
|
|
Ibm Power_System_S1112_\(9242-21b\)
cpe:2.3:h:ibm:power_system_s1112_\(9242-21b\):-:*:*:*:*:*:*:*
|
— | — |
|
Ibm Power_System_S1112_\(9242-21t\)_Firmware
cpe:2.3:o:ibm:power_system_s1112_\(9242-21t\)_firmware:*:*:*:*:*:*:*:*
|
fw1120.00
|
fw1120.02
|
|
Ibm Power_System_S1112_\(9242-21t\)
cpe:2.3:h:ibm:power_system_s1112_\(9242-21t\):-:*:*:*:*:*:*:*
|
— | — |
|
Ibm Power_System_E1080_\(9080-Hex\)_Firmware
cpe:2.3:o:ibm:power_system_e1080_\(9080-hex\)_firmware:*:*:*:*:*:*:*:*
|
fw1060.00
|
fw1060.82
|
|
Ibm Power_System_E1080_\(9080-Hex\)
cpe:2.3:h:ibm:power_system_e1080_\(9080-hex\):-:*:*:*:*:*:*:*
|
— | — |
|
Ibm Power_System_S1022_\(9105-22a\)_Firmware
cpe:2.3:o:ibm:power_system_s1022_\(9105-22a\)_firmware:*:*:*:*:*:*:*:*
|
fw1060.00
|
fw1060.82
|
|
Ibm Power_System_S1022_\(9105-22a\)
cpe:2.3:h:ibm:power_system_s1022_\(9105-22a\):-:*:*:*:*:*:*:*
|
— | — |
|
Ibm Power_System_S1024_\(9105-42a\)_Firmware
cpe:2.3:o:ibm:power_system_s1024_\(9105-42a\)_firmware:*:*:*:*:*:*:*:*
|
fw1060.00
|
fw1060.82
|
|
Ibm Power_System_S1024_\(9105-42a\)
cpe:2.3:h:ibm:power_system_s1024_\(9105-42a\):-:*:*:*:*:*:*:*
|
— | — |
|
Ibm Power_System_S1022s_\(9105-22b\)_Firmware
cpe:2.3:o:ibm:power_system_s1022s_\(9105-22b\)_firmware:*:*:*:*:*:*:*:*
|
fw1060.00
|
fw1060.82
|
|
Ibm Power_System_S1022s_\(9105-22b\)
cpe:2.3:h:ibm:power_system_s1022s_\(9105-22b\):-:*:*:*:*:*:*:*
|
— | — |
|
Ibm Power_System_S1014_\(9105-41b\)_Firmware
cpe:2.3:o:ibm:power_system_s1014_\(9105-41b\)_firmware:*:*:*:*:*:*:*:*
|
fw1060.00
|
fw1060.82
|
|
Ibm Power_System_S1014_\(9105-41b\)
cpe:2.3:h:ibm:power_system_s1014_\(9105-41b\):-:*:*:*:*:*:*:*
|
— | — |
|
Ibm Power_System_L1022_\(9786-22h\)_Firmware
cpe:2.3:o:ibm:power_system_l1022_\(9786-22h\)_firmware:*:*:*:*:*:*:*:*
|
fw1060.00
|
fw1060.82
|
|
Ibm Power_System_L1022_\(9786-22h\)
cpe:2.3:h:ibm:power_system_l1022_\(9786-22h\):-:*:*:*:*:*:*:*
|
— | — |
|
Ibm Power_System_L1024_\(9786-42h\)_Firmware
cpe:2.3:o:ibm:power_system_l1024_\(9786-42h\)_firmware:*:*:*:*:*:*:*:*
|
fw1060.00
|
fw1060.82
|
|
Ibm Power_System_L1024_\(9786-42h\)
cpe:2.3:h:ibm:power_system_l1024_\(9786-42h\):-:*:*:*:*:*:*:*
|
— | — |
|
Ibm Power_System_E1050_\(9043-Mrx\)_Firmware
cpe:2.3:o:ibm:power_system_e1050_\(9043-mrx\)_firmware:*:*:*:*:*:*:*:*
|
fw1060.00
|
fw1060.82
|
|
Ibm Power_System_E1050_\(9043-Mrx\)
cpe:2.3:h:ibm:power_system_e1050_\(9043-mrx\):-:*:*:*:*:*:*:*
|
— | — |
|
Ibm Power_System_S1012_\(9028-21b\)_Firmware
cpe:2.3:o:ibm:power_system_s1012_\(9028-21b\)_firmware:*:*:*:*:*:*:*:*
|
fw1060.00
|
fw1060.82
|
|
Ibm Power_System_S1012_\(9028-21b\)
cpe:2.3:h:ibm:power_system_s1012_\(9028-21b\):-:*:*:*:*:*:*:*
|
— | — |
|
Ibm Power_System_E1180_\(9080-Heu\)_Firmware
cpe:2.3:o:ibm:power_system_e1180_\(9080-heu\)_firmware:*:*:*:*:*:*:*:*
|
fw1110.00
|
fw1110.32
|
|
Ibm Power_System_E1180_\(9080-Heu\)_Firmware
cpe:2.3:o:ibm:power_system_e1180_\(9080-heu\)_firmware:*:*:*:*:*:*:*:*
|
fw1120.00
|
fw1120.02
|
|
Ibm Power_System_E1180_\(9080-Heu\)
cpe:2.3:h:ibm:power_system_e1180_\(9080-heu\):-:*:*:*:*:*:*:*
|
— | — |