This vulnerability, classified as CWE-120 (Classic Buffer Overflow), affects IBM i versions 7.3 through 7.6. It arises from a failure to check the size of input before copying it into a buffer, which can be exploited remotely without authentication. The flaw can lead to denial of service and unauthorized modification of authentication metadata. The CVSS v3.1 base score is 8.2, indicating high severity with network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, limited integrity impact, and high availability impact. No official patch or remediation level has been provided yet, and no known exploits are reported in the wild.

An attacker can remotely exploit this buffer overflow to cause a denial of service on the affected IBM i systems and potentially modify authentication metadata, which could undermine system authentication mechanisms. The integrity of authentication data is impacted, and system availability can be severely disrupted. Confidentiality is not affected according to the CVSS vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users should monitor IBM's advisories for updates. Until a patch is available, consider restricting network access to affected systems to trusted sources to reduce exposure.