CVE-2016-0260
HighSummary
A memory leak in queue-manager agents in IBM WebSphere MQ 8.x before version 8.0.0.5 allows remote attackers to cause a denial of service by triggering many errors.
Risk Assessment
Attackers can exploit this vulnerability to exhaust heap memory, leading to service disruption.
Recommendation
It is recommended to upgrade to version 8.0.0.5 or later to mitigate this vulnerability.
Other vulnerabilities in IBM WebSphere MQ 8.x
See all- CVE-2017-1760High
IBM WebSphere MQ versions 7.5, 8.0, and 9.0 could allow a local user to crash the queue manager agent thread and expose some sensitive information.
- CVE-2017-1337High
IBM WebSphere MQ versions 9.0.1 and 9.0.2 may incorrectly transmit user credentials in plain text.
- CVE-2017-1145High
IBM WebSphere MQ version 8.0.0.6 does not properly terminate channel agents when they are no longer needed, which could allow a user to cause a denial of service through resource exhaustion.
Original NVD description (English source)
Memory leak in queue-manager agents in IBM WebSphere MQ 8.x before 8.0.0.5 allows remote attackers to cause a denial of service (heap memory consumption) by triggering many errors.