CVE-2026-17469

Analyzed Analyzed - Analysis Complete

Denial of Service in IBM i LPD Queue Name Parser

Publication date: 2026-09-04

Last updated on: 2026-09-09

Assigner: IBM Corporation

Description

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to cause a denial of service due to an off-by-one write in the LPD queue name parser.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-04

Last Modified

2026-09-09

Generated

2026-09-25

AI Q&A

2026-09-04

EPSS Evaluated

2026-09-24

NVD

CVE-2026-17469

EUVD

EUVD-2026-71470

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	i	7.3
ibm	i	7.4
ibm	i	7.5
ibm	i	7.6

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-787	The product writes data past the end, or before the beginning, of the intended buffer.
CWE-193	A product calculates or uses an incorrect maximum or minimum value that is 1 more, or 1 less, than the correct value.

Attack-Flow Graph

Executive Summary

This is a denial of service vulnerability in IBM i operating systems versions 7.6, 7.5, 7.4, and 7.3. It occurs due to an off-by-one write error in the LPD queue name parser, which could allow a local authenticated attacker to cause system disruption.

Detection Guidance

Detection involves checking IBM i LPD queue names for unusual patterns or crashes. Monitor for service interruptions in LPD queues and verify PTF installations. Use system logs to identify off-by-one write errors in queue name parsing.

Impact Analysis

If exploited, this vulnerability could lead to system instability or unavailability by causing a denial of service. Since it requires local authenticated access, the impact is limited to users with existing system access.

Compliance Impact

This vulnerability causes a denial of service due to an off-by-one write in the LPD queue name parser. It does not directly impact data confidentiality or integrity, which are key focus areas for GDPR and HIPAA. However, availability disruptions could indirectly affect compliance by impairing system operations.

Mitigation Strategies

Apply IBM i PTFs or updates addressing the LPD queue name parser vulnerability. Monitor IBM i security bulletins for patches and restrict local authenticated user access until fixes are applied.

Hi! I’m here to help you understand CVE-2026-17469. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70