EUVD-2026-62747
GHSA-r9qv-gv57-mv22
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Network-reachable integer overflow requiring no authentication or interaction; impact is availability-only with no confidentiality or integrity consequence.
Primary rating from Vendor (ibm).
CVSS VectorVendor: ibm
Lifecycle Timeline
2DescriptionCVE.org
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an integer overflow.
AnalysisAI
Remote denial of service in IBM AIX 7.2, AIX 7.3, and PowerVM VIOS 4.1 allows an unauthenticated network attacker to crash affected systems by triggering an integer overflow in a network-reachable component. The CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H vector confirms full availability loss with no authentication or user interaction required. No public exploit code has been identified at time of analysis, and this CVE does not appear in the CISA Known Exploited Vulnerabilities catalog; however, the low attack complexity means opportunistic exploitation is feasible once technical details become public.
Technical ContextAI
IBM AIX is a proprietary UNIX operating system running on IBM Power Systems hardware; PowerVM VIOS (Virtual I/O Server) is the virtualization hypervisor layer that mediates I/O between logical partitions (LPARs) and the physical hardware. CWE-190 (Integer Overflow or Wraparound) is the root cause: when an arithmetic operation exceeds the maximum value representable by its integer type, the result wraps around to an unexpected small or negative value. In a network-receiving code path this commonly manifests as an undersized buffer allocation or a corrupted loop counter, leading to a process crash or kernel panic. The CPE strings cpe:2.3:a:ibm:aix:*:*:*:*:*:*:*:* and cpe:2.3:a:ibm:powervm_vios:*:*:*:*:*:*:*:* apply broadly, but EUVD data narrows the confirmed affected scope to AIX 7.2, AIX 7.3, and PowerVM VIOS 4.1. The specific daemon or network service containing the flaw is not identified in publicly available data.
RemediationAI
A vendor-released patch is available per IBM's advisory at https://www.ibm.com/support/pages/node/7283858; administrators should consult this page for the exact fix level (Technology Level or Service Pack) applicable to their installed AIX 7.2, AIX 7.3, or PowerVM VIOS 4.1 version, as no specific patched version number was published in the available intelligence data. For environments where immediate patching is not possible, consider restricting network access to AIX and VIOS management interfaces and any exposed network services through firewall ACLs or network segmentation, reducing the reachable attack surface. Because VIOS acts as the I/O mediation layer for all LPARs on a given Power frame, a denial of service on VIOS would impact all hosted partitions, so prioritize patching VIOS hosts first. Note that network-layer filtering is a compensating control only and does not eliminate the vulnerability; patching remains the definitive remediation.
The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which mak
Multiple unspecified vulnerabilities in the InfiniBand subsystem in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, a
IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the invscout c
IBM AIX contains an unspecified vulnerability that would allow a locally authenticated user to obtain root level privile
IBM AIX 5.3, 6.1, 7.1, and 7.2 contains an unspecified vulnerability that would allow a locally authenticated user to ob
IBM AIX 6.1, 7.1, and 7.2 could allow a local user to gain root privileges using a specially crafted command within the
lquerylv in cmdlvm in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x allows local users to gain privileges via a crafted DBGCM
libodm.a in IBM AIX 5.3, 6.1, and 7.1 allows local users to overwrite arbitrary files via a symlink attack on a temporar
libodm.a in IBM AIX 6.1 and 7.1, and VIOS 2.2.x, allows local users to overwrite arbitrary files via a symlink attack on
OS command injection in IBM AIX 7.2 and 7.3 and PowerVM VIOS 4.1 lets a remote, low-privileged authenticated attacker ru
OS command injection in IBM AIX 7.2 and 7.3 and in IBM PowerVM VIOS 4.1 lets a remote, authenticated attacker execute ar
OS command injection in IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 lets a remote authenticated attacker run arbitrary commands
Same weakness CWE-190 – Integer Overflow or Wraparound
View allSame technique Denial Of Service
View allShare
External POC / Exploit Code
Leaving vuln.today