CVE-2015-1958
HighSummary
IBM MQ Light before version 1.0.0.2 allows remote attackers to cause a denial of service (disk consumption) via a crafted byte sequence in authentication data.
Risk Assessment
Attackers can exploit this vulnerability to fill up disk space, potentially leading to service interruptions and operational disruptions for the organization.
Recommendation
It is recommended to upgrade IBM MQ Light to version 1.0.0.2 or later to mitigate the risk associated with this vulnerability.
Other vulnerabilities in IBM MQ Light
See all- CVE-2015-1987High
IBM MQ Light before version 1.0.0.2 allows remote attackers to cause a denial of service (disk consumption) via a crafted byte sequence in authentication data.
- CVE-2015-1956High
IBM MQ Light before 1.0.0.2 allows remote attackers to cause a denial of service (disk consumption) via a crafted byte sequence in authentication data.
- CVE-2015-1955High
IBM MQ Light before version 1.0.0.2 allows remote attackers to cause a denial of service (CPU consumption) via a crafted byte sequence in authentication data.
Original NVD description (English source)
IBM MQ Light before 1.0.0.2 allows remote attackers to cause a denial of service (disk consumption) via a crafted byte sequence in authentication data, a different vulnerability than CVE-2015-1956 and CVE-2015-1987.