CVE-2026-17216

Analyzed Analyzed - Analysis Complete

Integer Error in IBM i Causes Denial of Service via DRDA Headers

Publication date: 2026-08-13

Last updated on: 2026-08-19

Assigner: IBM Corporation

Description

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an integer error when processing DRDA large-object headers.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-13

Last Modified

2026-08-19

Generated

2026-09-03

AI Q&A

2026-08-14

EPSS Evaluated

2026-09-02

NVD

CVE-2026-17216

EUVD

EUVD-2026-58402

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	i	7.3
ibm	i	7.4
ibm	i	7.5
ibm	i	7.6

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-190	The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

Attack-Flow Graph

Executive Summary

IBM i versions 7.6, 7.5, 7.4, and 7.3 are vulnerable to a denial of service attack due to an integer error when processing DRDA large-object headers. This allows a remote attacker to disrupt system availability without needing authentication or user interaction.

Detection Guidance

This vulnerability is specific to IBM i systems and involves DRDA large-object header processing. Detection requires checking IBM i systems for network traffic handling large DRDA objects. Monitor for unusual network traffic patterns or crashes during DRDA communication. Use IBM i system logs and network monitoring tools to identify anomalies in DRDA protocol handling.

Impact Analysis

This vulnerability could cause your IBM i system to become unresponsive or crash, leading to service disruptions. It may result in downtime for applications relying on the affected IBM i versions.

Compliance Impact

This vulnerability causes a denial of service due to an integer error in DRDA large-object headers. It does not directly impact data confidentiality or integrity, but availability disruptions could affect compliance with standards requiring high system uptime, such as HIPAA for healthcare systems or GDPR for data processing availability.

Mitigation Strategies

Apply IBM i PTFs or updates for versions 7.6, 7.5, 7.4, and 7.3 to address the integer error in DRDA large-object header processing. Monitor IBM i security bulletins for patches and test updates in a non-production environment before deployment.

Hi! I’m here to help you understand CVE-2026-17216. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70