CVE-2017-1145

HIGH

IBM WebSphere MQ 8.0.0.6 - Denial of Service via Channel Agent Resource Exhaustion

Title source: llm

Description

IBM WebSphere MQ 8.0.0.6 does not properly terminate channel agents when they are no longer needed, which could allow a user to cause a denial of service through resource exhaustion. IBM Reference #: 1999672.

References (3)

Core 3

Core References

Patch, Vendor Advisory x_refsource_confirm

http://www.ibm.com/support/docview.wss?uid=swg21999672

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/96759

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1038068

Scores

CVSS v3 8.6

EPSS 0.0050

EPSS Percentile 66.0%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Details

CWE

CWE-404

Status published

Products (2)

ibm/websphere_mq 8.0.0.6

IBM Corporation/WebSphere MQ 8.0.0.6

Published Mar 20, 2017

Tracked Since Feb 18, 2026