Shared memory leak in IBM MQ - CVE-2017-1283
Published: December 6, 2017
Vulnerability identifier: #VU9546
CSH Severity: Low
CVSS v4: 2.3 [CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2017-1283
CWE-ID: CWE-401
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to cause DoS condition on the target system.
The weakness exists due to a shared memory leak. A remote attacker can use MQ applications using dynamic queues to trigger shared memory leak and cause lack of resources for other MQ applications.
The weakness exists due to a shared memory leak. A remote attacker can use MQ applications using dynamic queues to trigger shared memory leak and cause lack of resources for other MQ applications.
Affected software
IBM MQ
How to mitigate CVE-2017-1283
Update to version 8.0.0.7, 9.0.0.2 or 9.0.4.