CVE-2014-3977: IBM Aix

Medium severity, CVSS 6.9. EPSS: 0.9% chance of exploitation in the next 30 days.

libodm.a in IBM AIX 6.1 and 7.1, and VIOS 2.2.x, allows local users to overwrite arbitrary files via a symlink attack on a temporary file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-2179.

Affected products

• IBM Aix: version 6.1 only; version 7.1 only
• IBM Vios: version 2.2.0.10 only; version 2.2.0.11 only; version 2.2.0.12 only; version 2.2.0.13 only; version 2.2.1.0 only; version 2.2.1.1 only; …

Published 2014-06-08. Last modified 2026-06-17.