Vulnerabilities > IBM > I > 6.1

DATE CVE VULNERABILITY TITLE RISK
2017-07-31 CVE-2017-1460 Improper Input Validation vulnerability in IBM I
IBM i OSPF 6.1, 7.1, 7.2, and 7.3 is vulnerable when a rogue router spoofs its origin.
network
low complexity
ibm CWE-20
5.0
2014-01-02 CVE-2013-5385 Improper Input Validation vulnerability in IBM I and Z/Os
The OSPF implementation in IBM i 6.1 and 7.1, in z/OS on zSeries servers, and in Networking Operating System (aka NOS, formerly BLADE Operating System) does not properly validate Link State Advertisement (LSA) type 1 packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet, a related issue to CVE-2013-0149.
network
low complexity
ibm CWE-20
8.5