IBM i File-Level Local Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in IBM i versions 7.2, 7.3, 7.4, and 7.5. This vulnerability arises from an inadequate authority requirement, allowing a local non-privileged user to create a referential constraint using the privileges of another user who has been socially engineered to access the targeted file.

Impact

Exploitation of this vulnerability leads to a local denial-of-service condition, causing disruption at the file level.

Remediation

Users can apply a PTF to address this vulnerability. The specific PTF numbers for each affected IBM i release are as follows: 7.5 (SJ03022), 7.4 (SJ02988), 7.3 (SJ03130), and 7.2 (SJ03131).