Description
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to a buffer overflow.
Published: 2026-09-04
Score: 5.3 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Denial of Service
Action: Apply PTF
AI Analysis

Impact

An attacker can trigger a buffer overflow in the line printer daemon of IBM i systems, which can lead to a service restart and temporary denial of service. The overflow occurs when handling specific print requests, allowing the attacker to exhaust system resources. This flaw does not provide direct code execution or data disclosure.

Affected Systems

The vulnerability affects IBM i releases 7.6, 7.5, 7.4, and 7.3. Patches are available through IBM’s PTFs ’SJ11300’ for 7.6, ’SJ11301’ for 7.5, ’SJ11302’ for 7.4, and ’SJ11303’ for 7.3, all bundled in the IBM i Release5770‑TC1 fix set.

Risk and Exploitability

The CVSS score of 5.3 indicates a moderate severity. EPSS data is not available, and the flaw is not listed in the CISA KEV catalog, suggesting that widespread exploitation is unlikely pending a vulnerability disclosure. Nonetheless, remote exploitation is possible via the printer daemon service, and any attacker who can reach the affected host can force a reboot or inhibit I/O, causing disruption.

Generated by OpenCVE AI on September 4, 2026 at 18:07 UTC.

Remediation

Vendor Solution

IBM i Release5770-TC1  PTF Number(s)PTF Download Link(s)7.6SJ11300 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11300 7.5SJ11301 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11301 7.4SJ11302 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11302 7.3SJ11303 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11303 IBM recommends users running unsupported versions of affected products upgrade to a supported and fixed version of affected products.

OpenCVE Recommended Actions

  • Apply the appropriate PTF from IBM for your IBM i version (e.g., SJ11300 for 7.6, SJ11301 for 7.5, etc.)
  • If on an unsupported version, upgrade to a supported and fixed release of IBM i
  • Limit network exposure of the line printer daemon to trusted hosts or apply firewall rules to block unauthorized access

Generated by OpenCVE AI on September 4, 2026 at 18:07 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 09 Sep 2026 16:00:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:o:ibm:i:7.3:*:*:*:*:*:*:*
cpe:2.3:o:ibm:i:7.4:*:*:*:*:*:*:*
cpe:2.3:o:ibm:i:7.5:*:*:*:*:*:*:*
cpe:2.3:o:ibm:i:7.6:*:*:*:*:*:*:*

Fri, 04 Sep 2026 18:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Fri, 04 Sep 2026 16:45:00 +0000

Type Values Removed Values Added
Description IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to a buffer overflow.
Title IBM i is Affected By Denial of Service Vulnerabilities in Line Printer Daemon [, ]
First Time appeared Ibm
Ibm i
Weaknesses CWE-787
CPEs cpe:2.3:a:ibm:i:7.3.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:i:7.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:i:7.4.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:i:7.4:*:*:*:*:*:*:*
cpe:2.3:a:ibm:i:7.5.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:i:7.5:*:*:*:*:*:*:*
cpe:2.3:a:ibm:i:7.6.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:i:7.6:*:*:*:*:*:*:*
Vendors & Products Ibm
Ibm i
References
Metrics cvssV3_1

{'score': 5.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'}

Subscriptions

Ibm I
cve-icon MITRE

Status: PUBLISHED

Assigner: ibm

Published:

Updated: 2026-09-04T17:35:58.477Z

Reserved: 2026-07-25T20:52:27.765Z

Link: CVE-2026-17470

cve-icon Vulnrichment

Updated: 2026-09-04T17:35:19.155Z

cve-icon NVD

Status : Analyzed

Published: 2026-09-04T17:16:54.630

Modified: 2026-09-09T15:53:41.757

Link: CVE-2026-17470

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-04T21:45:17Z

Weaknesses