IBM i Denial-of-Service Vulnerability via Failed Authentication Connections

A denial-of-service vulnerability has been identified in IBM i version 7.6. This issue allows remote attackers to cause a denial of service by exploiting failed authentication connections, which leads to improper resource allocation.

Impact

Exploitation of this vulnerability can cause a denial-of-service condition, disrupting normal operations by overwhelming the system with failed authentication attempts.

Remediation

Users are advised to upgrade to version 7.6 and apply the PTF number SJ09012, available through the IBM My Support portal. For unsupported versions, upgrade to a supported version.