CVE-2012-4817
Status: ModifiedMedium (5)—
The NFSv4 client implementation in IBM AIX 5.3, 6.1, and 7.1, and VIOS before 2.2.1.4-FP-25 SP-02, does not properly handle GID values, which allows remote attackers to cause a denial of service via unspecified vectors.
CVSS
- Version: 2.0
- Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
- Base score: 5
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days: 7.59%
- Percentile among all scored CVEs: 94
- Score date: 10/7/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (2)
CWEs
- NVD-CWE-Other
References
- http://aix.software.ibm.com/aix/efixes/security/nfsv4_advisory1.asc
- http://osvdb.org/85427
- http://secunia.com/advisories/50619
- http://www.ibm.com/support/docview.wss?uid=isg1IV10327
- http://www.ibm.com/support/docview.wss?uid=isg1IV11629
- http://www.ibm.com/support/docview.wss?uid=isg1IV12169
- http://www.ibm.com/support/docview.wss?uid=isg1IV17855
- http://www.ibm.com/support/docview.wss?uid=isg1IV26436
- http://www.securityfocus.com/bid/55546
- http://www.securitytracker.com/id?1027531
- https://exchange.xforce.ibmcloud.com/vulnerabilities/78431
- http://aix.software.ibm.com/aix/efixes/security/nfsv4_advisory1.asc
- http://osvdb.org/85427
- http://secunia.com/advisories/50619
- http://www.ibm.com/support/docview.wss?uid=isg1IV10327
- http://www.ibm.com/support/docview.wss?uid=isg1IV11629
- http://www.ibm.com/support/docview.wss?uid=isg1IV12169
- http://www.ibm.com/support/docview.wss?uid=isg1IV17855
- http://www.ibm.com/support/docview.wss?uid=isg1IV26436
- http://www.securityfocus.com/bid/55546
- http://www.securitytracker.com/id?1027531
- https://exchange.xforce.ibmcloud.com/vulnerabilities/78431
Raw JSON (NVD)
Show
{
"id": "CVE-2012-4817",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "NONE"
},
"acInsufInfo": true,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "psirt@us.ibm.com",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2012-09-14T23:55:15.260",
"references": [
{
"url": "http://aix.software.ibm.com/aix/efixes/security/nfsv4_advisory1.asc",
"tags": [
"Vendor Advisory"
],
"source": "psirt@us.ibm.com"
},
{
"url": "http://osvdb.org/85427",
"source": "psirt@us.ibm.com"
},
{
"url": "http://secunia.com/advisories/50619",
"source": "psirt@us.ibm.com"
},
{
"url": "http://www.ibm.com/support/docview.wss?uid=isg1IV10327",
"tags": [
"Vendor Advisory"
],
"source": "psirt@us.ibm.com"
},
{
"url": "http://www.ibm.com/support/docview.wss?uid=isg1IV11629",
"tags": [
"Vendor Advisory"
],
"source": "psirt@us.ibm.com"
},
{
"url": "http://www.ibm.com/support/docview.wss?uid=isg1IV12169",
"tags": [
"Vendor Advisory"
],
"source": "psirt@us.ibm.com"
},
{
"url": "http://www.ibm.com/support/docview.wss?uid=isg1IV17855",
"tags": [
"Vendor Advisory"
],
"source": "psirt@us.ibm.com"
},
{
"url": "http://www.ibm.com/support/docview.wss?uid=isg1IV26436",
"tags": [
"Vendor Advisory"
],
"source": "psirt@us.ibm.com"
},
{
"url": "http://www.securityfocus.com/bid/55546",
"source": "psirt@us.ibm.com"
},
{
"url": "http://www.securitytracker.com/id?1027531",
"source": "psirt@us.ibm.com"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/78431",
"source": "psirt@us.ibm.com"
},
{
"url": "http://aix.software.ibm.com/aix/efixes/security/nfsv4_advisory1.asc",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://osvdb.org/85427",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/50619",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.ibm.com/support/docview.wss?uid=isg1IV10327",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.ibm.com/support/docview.wss?uid=isg1IV11629",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.ibm.com/support/docview.wss?uid=isg1IV12169",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.ibm.com/support/docview.wss?uid=isg1IV17855",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.ibm.com/support/docview.wss?uid=isg1IV26436",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/55546",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securitytracker.com/id?1027531",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/78431",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The NFSv4 client implementation in IBM AIX 5.3, 6.1, and 7.1, and VIOS before 2.2.1.4-FP-25 SP-02, does not properly handle GID values, which allows remote attackers to cause a denial of service via unspecified vectors."
},
{
"lang": "es",
"value": "La implementación del cliente NFSv4 en IBM AIX v5.3, v6.1, y v7.1, y VIOS anteriores a v2.2.1.4-FP-25 SP-02, no maneja valores GID de forma adecuada, lo que permite a atacantes remotos a provocar una denegación de servicio a través de vectores no especificados."
}
],
"lastModified": "2026-06-16T23:45:43.900",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ibm:vios:1.4.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B86EC374-00A0-455D-9EB7-9FCA31E0941D"
},
{
"criteria": "cpe:2.3:a:ibm:vios:1.5.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "22589863-4C19-4658-A206-D2C9BDD04B73"
},
{
"criteria": "cpe:2.3:a:ibm:vios:1.5.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E069778A-7DBD-488F-AFA5-FA1DEEEAD5C1"
},
{
"criteria": "cpe:2.3:a:ibm:vios:1.5.2.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8E8F8BC3-9C84-4EC5-AA4C-1573CD7C0CB8"
},
{
"criteria": "cpe:2.3:a:ibm:vios:2.1.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "59F51BB1-74A6-468A-BAED-FFCB043A2CCE"
},
{
"criteria": "cpe:2.3:a:ibm:vios:2.1.2.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C69FB826-F45A-4F1A-8682-382B426711AD"
},
{
"criteria": "cpe:2.3:a:ibm:vios:2.1.2.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0ACF9BCD-A1AA-44B3-AB0A-882791807CF9"
},
{
"criteria": "cpe:2.3:a:ibm:vios:2.1.2.13:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D078AAEB-2A80-41EE-8227-8941299380DC"
},
{
"criteria": "cpe:2.3:a:ibm:vios:2.1.3.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9DB67DE7-B42B-4787-8147-5AA9BE1BC4D9"
},
{
"criteria": "cpe:2.3:a:ibm:vios:2.2.0.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C17C77E3-ABCE-4F1F-A55D-DB61A2A5E28F"
},
{
"criteria": "cpe:2.3:a:ibm:vios:2.2.0.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "89B876D5-7095-4BA2-9EE3-3F0632BC2E77"
},
{
"criteria": "cpe:2.3:a:ibm:vios:2.2.0.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "918D00A4-5502-4DD6-A079-807AB3E964B2"
},
{
"criteria": "cpe:2.3:a:ibm:vios:2.2.0.13:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A38E8EAD-0742-41CB-B69E-DCC483CBC485"
},
{
"criteria": "cpe:2.3:a:ibm:vios:2.2.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D1E3BE5C-5097-4585-AF0D-79661DC4A231"
},
{
"criteria": "cpe:2.3:a:ibm:vios:2.2.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "953723A1-606F-4976-A843-1A3F020B9B53"
},
{
"criteria": "cpe:2.3:a:ibm:vios:2.2.1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3F70EC32-7365-4653-8843-84C92EE9EC68"
},
{
"criteria": "cpe:2.3:a:ibm:vios:2.2.1.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AFABBD01-0773-4823-ABBA-95181558C88E"
},
{
"criteria": "cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"
},
{
"criteria": "cpe:2.3:o:ibm:aix:6.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FD518B94-9CD7-4C45-8766-578CF427B4CF"
},
{
"criteria": "cpe:2.3:o:ibm:aix:7.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0402E20C-8B41-4A2A-BFF9-92EC843985F0"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "psirt@us.ibm.com"
}