CVE-2026-17177

Analyzed Analyzed - Analysis Complete

Denial of Service in IBM Db2 Mirror for i

Publication date: 2026-08-14

Last updated on: 2026-08-20

Assigner: IBM Corporation

Description

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to cause a denial of service due to uncontrolled recursion.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-14

Last Modified

2026-08-20

Generated

2026-09-04

AI Q&A

2026-08-14

EPSS Evaluated

2026-09-02

NVD

CVE-2026-17177

EUVD

EUVD-2026-58760

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	db2_mirror_for_i	From 7.4 (inc) to 7.6 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-674	The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.

Attack-Flow Graph

Executive Summary

IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 are vulnerable to a denial of service attack due to uncontrolled recursion. This means a remote attacker could exploit this flaw to cause the system to crash or become unavailable by sending specially crafted requests.

Detection Guidance

This vulnerability is specific to IBM Db2 Mirror for i and involves uncontrolled recursion leading to denial of service. Detection requires monitoring for unusual network traffic patterns or system resource exhaustion targeting Db2 Mirror services. Check for repeated connection attempts or abnormal CPU/memory usage on systems running Db2 Mirror for i 7.4, 7.5, or 7.6.

Impact Analysis

This vulnerability could disrupt database operations by making the system unresponsive, leading to downtime for applications relying on IBM Db2 Mirror for i. It may also cause data access issues or service interruptions for users.

Compliance Impact

The vulnerability causes a denial of service due to uncontrolled recursion, which could disrupt system availability. This may impact compliance with standards like GDPR or HIPAA that require data availability and integrity, as prolonged downtime could lead to violations of access or processing requirements.

Mitigation Strategies

Apply the latest IBM Db2 Mirror for i patches or updates provided by IBM to address the uncontrolled recursion issue. Monitor IBM security advisories for fixes and implement network-level protections to limit exposure to remote attackers.

Hi! I’m here to help you understand CVE-2026-17177. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70