IBM Security Bulletin: IBM MQ can cause a Denial of Service attack to connecting MQTT clients (CVE-2018-1684)

Nov 6, 2018 8:01 am EST

Categorized: Medium Severity

Share this post:

A problem within the IBM MQ MQTT Service logic could cause a denial of service attack to be executed against MQTT clients attempting to connect to the queue manager.

CVE(s): CVE-2018-1684

Affected product(s) and affected version(s):

IBM MQ V8

IBM MQ V8 versions 8.0.0.0 – 8.0.0.10

IBM MQ V9 LTS

IBM MQ V9 LTS versions 9.0.0.0 – 9.0.0.5

IBM MQ V9 CD

IBM MQ V9 CD versions 9.0.1 – 9.0.5

IBM MQ V9.1 LTS

IBM MQ V9.1 LTS versions 9.1.0.0

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: https://www-01.ibm.com/support/docview.wss?uid=ibm10734297
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/145456

from IBM Product Security Incident Response Team https://ift.tt/2QnjZYB