IBM Security Bulletin: Malformed message headers could cause message transmission to be blocked through channels resulting in denial of service in IBM MQ(CVE-2018-1503)
Jul 20, 2018 9:01 am EDT
Categorized: Medium Severity
Share this post:
IBM MQ RCVR or CLUSRCVR type channels could go into retry status after receiving messages containing invalid or malformed headers. This results in blocking of further transmission of messages.
CVE(s): CVE-2018-1503
Affected product(s) and affected version(s):
IBM WebSphere MQ v7.5.0.0 to 7.5.0.8
IBM WebSphere MQ v8.0.0.0 to 8.0.0.9
IBM MQ 9.0.0.0 to 9.0.0.3
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=swg22015617
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/141339
from IBM Product Security Incident Response Team https://ift.tt/2Lo3w78