CVE-2017-1145
HighSummary
IBM WebSphere MQ version 8.0.0.6 does not properly terminate channel agents when they are no longer needed, which could allow a user to cause a denial of service through resource exhaustion.
Risk Assessment
The organization may be vulnerable to denial of service attacks, leading to service unavailability and potential financial losses.
Recommendation
It is recommended to update IBM WebSphere MQ to the latest version to address this vulnerability and to monitor system resource usage.
Other vulnerabilities in IBM WebSphere MQ 8.0.0.6
See all- CVE-2017-1760High
IBM WebSphere MQ versions 7.5, 8.0, and 9.0 could allow a local user to crash the queue manager agent thread and expose some sensitive information.
- CVE-2017-1337High
IBM WebSphere MQ versions 9.0.1 and 9.0.2 may incorrectly transmit user credentials in plain text.
- CVE-2016-0260High
A memory leak in queue-manager agents in IBM WebSphere MQ 8.x before version 8.0.0.5 allows remote attackers to cause a denial of service by triggering many errors.
Original NVD description (English source)
IBM WebSphere MQ 8.0.0.6 does not properly terminate channel agents when they are no longer needed, which could allow a user to cause a denial of service through resource exhaustion. IBM Reference #: 1999672.