CVE-2023-30440 MEDIUM

CVE-2023-30440: IBM PowerVM Hypervisor denial of service

Vendor Ibm
Product PowerVM Hypervisor
Weakness CWE-20 · Input validation
Published May 23, 2023
Last update January 17, 2025
View on NVD All CVEs

CVSS base score

6.7/10
Attack vector Local
Attack complexity High
Privileges required None
User interaction None
Confidentiality None
Integrity Low

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:H

What the vulnerability does

01Description

IBM PowerVM Hypervisor FW860.00 through FW860.B3, FW950.00 through FW950.70, FW1010.00 through FW1010.50, FW1020.00 through FW1020.30, and FW1030.00 through FW1030.10 could allow a local attacker with control a partition that has been assigned SRIOV virtual function (VF) to cause a denial of service to a peer partition or arbitrary data corruption. IBM X-Force ID: 253175.

Key dates

02Disclosure timeline

May 23, 2023 CVE published
January 17, 2025 Record updated