IBM Security Bulletin: IBM MQ clients connecting to an MQ queue manager can cause a SIGSEGV in the amqrmppa channel process terminating it. (CVE-2018-1371)
Apr 13, 2018 9:00 am EDT
Categorized: Medium Severity
Share this post:
An IBM MQ client connecting to an MQ queue manager can cause a SIGSEGV in the queue manager’s amqrmppa channel process, terminating it.
CVE(s): CVE-2018-1371
Affected product(s) and affected version(s):
IBM MQ V8.0
- Maintenance level 8.0.0.8
IBM MQ V9 LTS
- Maintenance level 9.0.0.2
IBM MQ V9 CD
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www-01.ibm.com/support/docview.wss?uid=swg22012983
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137771
from IBM Product Security Incident Response Team https://ift.tt/2GV9Dyi