IBM Security Bulletin: IBM MQ termination of a client application causes denial of service (CVE-2017-1235)

Termination during an MQGET call of a client application running on a channel with SHARECNV=1, could cause a SIGSEGV and queue manager termination.

CVE(s): CVE-2017-1235

Affected product(s) and affected version(s):

IBM MQ V8.0

IBM MQ V8.0.0.6 and earlier maintenance levels.

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2wBGUJB
X-Force Database: http://ift.tt/2ysGMcH

The post IBM Security Bulletin: IBM MQ termination of a client application causes denial of service (CVE-2017-1235) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2wBGVNF