CVE-2014-8904: IBM Aix

High severity, CVSS 7.2. EPSS: 1% chance of exploitation in the next 30 days.

lquerylv in cmdlvm in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x allows local users to gain privileges via a crafted DBGCMD_LQUERYLV environment-variable value.

Affected products

• IBM Aix: version 5.3 only; version 6.1 only; version 7.1 only
• IBM Vios: version 2.2.0.10 only; version 2.2.0.11 only; version 2.2.0.12 only; version 2.2.0.13 only; version 2.2.1.0 only; version 2.2.1.1 only; …

Published 2015-01-15. Last modified 2026-06-17.