Impact
The vulnerability is an instance of uncontrolled resource consumption in IBM AIX 7.2 and 7.3, and PowerVM VIOS 4.1. An attacker with local privileges can trigger excessive resource usage that leads to a denial of service, making the affected system unresponsive or unusable. The weakness is classified as CWE-400 and does not provide persistence or gain of additional privileges, but it can disrupt availability for users and applications running on the hardware.
Affected Systems
IBM AIX versions 7.2 and 7.3, including all intermediate service packs, and IBM PowerVM VIOS 4.1, including SP4.1.0, SP4.1.1, and SP4.1.2 are impacted. The specific fix levels are listed in the IBM Advisory and include a range of Service Packs for AIX and Fix Packs for VIOS.
Risk and Exploitability
The CVSS score of 5.5 indicates a moderate severity, and the EPSS score is not available, suggesting limited public exploitation data. The vulnerability is not listed in the CISA KEV catalog. The attack vector is inferred to be local, requiring the attacker to have privileged access to the system. When exploited, the denial of service can affect a single user session or bring down an entire virtual machine or host, depending on the environment. The time and effort required to exploit are low, and the impact is immediate once resource limits are overwhelmed.
OpenCVE Enrichment