New vulnerability discovered in IBM i Access Client Solutions due to vulnerabilities in the Apache Commons Compress library.
IBM has identified 2 main forms of attack for this flaw, index 5.5, and they both involve the same practice.
In fact, by persuading a victim to open a certain type of specially designed file, an attacker can exploit the flaw to cause a denial of service.
If the file is a pack200, the denial of service is caused by a memory denial, whereas if the file is in DUMP format, the denial of service will be caused by an infinite loop.
To remedy this potential danger, simply update ACS to the latest version(1.1.9.5 at least).
You can find details of this bulletin by clicking on the following link:
https://lnkd.in/etqiH3hg
Posted in Alert
