Threaded channel agents (amqrmppa) might not terminate when they are no longer required. This can lead to a denial of service through exhausting server resources.
CVE(s): CVE-2017-1145
Affected product(s) and affected version(s):
IBM WebSphere MQ V8
The only maintenance level that is affected by this vulnerability is 8.0.0.6.
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2neF3l6
X-Force Database: http://ift.tt/2mlHi8u
The post IBM Security Bulletin: IBM WebSphere MQ proliferation of channel agents causes denial of service (CVE-2017-1145) appeared first on IBM PSIRT Blog.
from IBM Product Security Incident Response Team http://ift.tt/2neFA6p
No comments:
Post a Comment
Note: Only a member of this blog may post a comment.