IBM Security Bulletin: IBM MQ Clients can send a specially crafted message that could cause a channel to SIGSEGV. (CVE-2017-1747)

Mar 29, 2018 9:00 am EDT

Categorized: Medium Severity

Share this post:

A specially crafted message could cause a denial of service in IBM MQ applications consuming messages that it needs to perform data conversion on.

CVE(s): CVE-2017-1747

Affected product(s) and affected version(s):

IBM MQ V9 LTS
Maintenance levels 9.0.0.0 – 9.0.0.2

IBM MQ V9 CD
Maintenance levels 9.0.0 – 9.0.4

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www-01.ibm.com/support/docview.wss?uid=swg22012992
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/135520

from IBM Product Security Incident Response Team https://ift.tt/2J4vBMX