CVE-2017-1460: Input Validation

Published Jul 31, 2017

Updated

IBM i OSPF 6.1, 7.1, 7.2, and 7.3 is vulnerable when a rogue router spoofs its origin. Routing tables are affected by a missing LSA, which may lead to loss of connectivity. IBM X-Force ID: 128379.

Affected Software

4 affected components

IBM i=6.1

IBM i=7.1

IBM i=7.2

IBM i=7.3

Event History

Jul 31, 2017

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-1460?

CVE-2017-1460 has been assessed as a moderate-severity vulnerability due to potential connectivity loss.

How does CVE-2017-1460 affect IBM i OSPF?

CVE-2017-1460 allows a rogue router to spoof its origin, impacting the routing tables and potentially leading to loss of connectivity.

What versions of IBM OS/400 are affected by CVE-2017-1460?

CVE-2017-1460 affects IBM OS/400 versions 6.1, 7.1, 7.2, and 7.3.

How can I mitigate the risks posed by CVE-2017-1460?

Mitigation strategies for CVE-2017-1460 include implementing proper network security measures and monitoring for suspicious routing behavior.

Is there a patch available for CVE-2017-1460?

IBM may provide updates or patches for CVE-2017-1460, and users are recommended to check IBM's official support resources for the latest information.