CVE Vulnerability Catalog

IBM i versions 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service (DoS) due to a heap buffer overflow.

IBM i versions 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to a heap-based buffer overflow.

IBM i versions 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to gain unauthorized access to system objects due to a time-of-check to time-of-use (TOCTOU) race condition involving symbolic links.

IBM i versions 7.6, 7.5, and 7.4 are vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to a buffer overflow.

IBM i versions 7.6, 7.5, 7.4, and 7.3 contain a path traversal vulnerability that could allow a remote authenticated attacker to gain unauthorized access to arbitrary objects.

IBM i versions 7.6, 7.5, 7.4, and 7.3 contain a vulnerability due to improper validation of an attacker-controlled file path, which could allow a local authenticated attacker to change the ownership of arbitrary files.

IBM i versions 7.6, 7.5, 7.4, and 7.3 contain a TOCTOU race condition vulnerability that could allow a local authenticated attacker to obtain unauthorized access to files.

IBM i 7.6 contains an out-of-bounds write vulnerability that could allow a remote attacker to cause a denial of service.

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to an out-of-bounds read.

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to a heap buffer overflow.

IBM i versions 7.6, 7.5, 7.4, and 7.3 use uninitialized memory during ASN.1 length processing, which could allow a remote attacker to cause a denial of service.

IBM i versions 7.6, 7.5, 7.4, and 7.3 contain an improper authentication vulnerability during NTLM session negotiation, which could allow a remote attacker to access server resources with the privileges of an authenticated user.

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an out-of-bounds read.

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to an out-of-bounds read.

IBM i versions 7.6, 7.5, 7.4, and 7.3 may allow a remote attacker to obtain sensitive information due to an out-of-bounds read.

IBM i versions 7.6, 7.5, 7.4, and 7.3 contain a stack-based buffer overflow vulnerability that could allow a remote attacker to cause a denial of service and potentially obtain sensitive information.

IBM i versions 7.6, 7.5, 7.4, and 7.3 contain an improper privilege management vulnerability that could allow a remote authenticated attacker to obtain unauthorized privileges.

IBM Documentation Offline versions 1.0.0 through 1.4.1 may allow a remote attacker to obtain sensitive information due to a security misconfiguration where the documentation server binds to an unrestricted IP address.

IBM i versions 7.6, 7.5, 7.4, and 7.3 may allow a remote authenticated attacker to cause a denial of service due to a stack-based buffer overflow.