IBM WebSphere MQ CVE-2017-1117 Denial of Service Vulnerability

Bugtraq ID:	99136
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2017-1117
Remote:	Yes
Local:	No
Published:	Jun 19 2017 12:00AM
Updated:	Jun 19 2017 12:00AM
Credit:	IBM
Vulnerable:	IBM WebSphere MQ 9.0.1 IBM WebSphere MQ 9.0.0.0 IBM WebSphere MQ 8.0.0.5 IBM WebSphere MQ 8.0.0.4 IBM WebSphere MQ 8.0.0.3 IBM WebSphere MQ 8.0.0.2 IBM WebSphere MQ 8.0.0.1 IBM WebSphere MQ 8.0.0.0
Not Vulnerable:	IBM WebSphere MQ 9.0.2 IBM WebSphere MQ 9.0.0.1

IBM WebSphere MQ CVE-2017-1117 Denial of Service Vulnerability

IBM WebSphere MQ is prone to a denial-of-service vulnerability.

An attacker can exploit this issue to cause denial-of-service condition.

IBM WebSphere MQ CVE-2017-1117 Denial of Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IBM WebSphere MQ CVE-2017-1117 Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

IBM WebSphere MQ CVE-2017-1117 Denial of Service Vulnerability

References:

• IBM Homepage (IBM)
  
• WebSphere MQ Homepage (IBM)
  
• swg22001468: IBM MQ Trace enablement could cause denial of service (CVE-2017-111 (IBM)