CVE-2008-0586 json
Multiple buffer overflows in IBM AIX 5.2 and 5.3 allow local users to gain privileges via unspecified vectors related to the (1) lchangevg,…
published 2008-02-05 18 y ago modified 2026-06-16 4 mo ago also EUVD-2008-0596
- cvss
- 7.2
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.4%
- EPSS 0.4% chance of exploitation in 30 days, percentile 36%
- public exploits
- 0
- none known
Summary
Multiple buffer overflows in IBM AIX 5.2 and 5.3 allow local users to gain privileges via unspecified vectors related to the (1) lchangevg, (2) ldeletepv, (3) putlvodm, (4) lvaryoffvg, and (5) lvgenminor programs in bos.rte.lvm; and the (6) tellclvmd program in bos.clvm.enh.
Exploit prediction
0.41% chance of exploitation in the next 30 days, higher than 36% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 7.2 | AV:L/AC:L/Au:N/C:C/I:C/A:C |
Classification
- Weakness
-
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
References
-
www-1.ibm.com
/support/docview.wss?uid=isg1IY98448
vendor-advisory
-
ibm.com
/support/docview.wss?uid=isg1IY98340
vendor-advisory
-
ibm.com
/support/docview.wss?uid=isg1IY98331
vendor-advisory
-
ibm.com
/support/docview.wss?uid=isg1IZ00559
vendor-advisory
-
ibm.com
/support/docview.wss?uid=isg1IZ10828
vendor-advisory
-
ibm.com
/support/docview.wss?uid=isg1IY99537
vendor-advisory
-
www-1.ibm.com
/support/docview.wss?uid=isg1IY98450
vendor-advisory
-
secunia.com
/advisories/28609
third-party-advisory, vendor-advisory
- www14.software.ibm.com /webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4068
-
exchange.xforce.ibmcloud.com
/vulnerabilities/39907
vdb-entry
- aix.software.ibm.com /aix/efixes/security/lvm_advisory.asc
-
osvdb.org
/40428
vdb-entry
-
osvdb.org
/40429
vdb-entry
-
securityfocus.com
/bid/27431
vdb-entry
-
osvdb.org
/40427
vdb-entry
-
vupen.com
/english/advisories/2008/0261
vdb-entry
-
oval.cisecurity.org
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5704
vdb-entry, signature
Sources
- CVE List CVE-2008-0586
- NVD CVE-2008-0586
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.