EUVD-2026-71480
GHSA-v475-h857-w8m4
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AV:A because ICMPv6 RAs are link-local; PR:N since RAs require no authentication; A:L for service-level DoS without full system crash.
Primary rating from Vendor (ibm).
CVSS VectorNVD
Lifecycle Timeline
3DescriptionNVD
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to improper validation of the prefix length in ICMPv6 Router Advertisements.
AnalysisAI
Denial-of-service in IBM i 7.3 through 7.6 allows an unauthenticated network-adjacent attacker to crash the ICMPv6 stack by sending a malformed Router Advertisement packet with an invalid prefix length. The underlying flaw is an out-of-bounds write (CWE-787) triggered by absent validation of the RA prefix length field, resulting in limited availability impact without confidentiality or integrity loss. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | IPv6 must be enabled and active on at least one IBM i network interface reachable by the attacker at Layer 2. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.3 base score with AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L appropriately characterizes this as a moderate, adjacency-limited denial-of-service. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the vendor-released patch described in IBM support advisory https://www.ibm.com/support/pages/node/7286093 for all affected IBM i releases (7.3, 7.4, 7.5, and 7.6); exact PTF identifiers per release are listed there and should be obtained directly, as they are not reproduced in the CVE metadata. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-787 – Out-of-bounds Write
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today