Not rated
CVE-2016-8971 IBM WebSphere MQ 8.0 could allow an authenticated user with queue manager permissions to cause a segmentation fault…
Description
IBM WebSphere MQ 8.0 could allow an authenticated user with queue manager permissions to cause a segmentation fault which would result in the box having to be rebooted to resume normal operations. IBM Reference #: 1998663.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WebSphere MQ | 9.0 | No fix stated |
| WebSphere MQ 8.0 | 8.0 → 8.0.0.4 | No fix stated |
| WebSphere MQ | 8 | No fix stated |
| WebSphere MQ 7.5 | 7.5 → 7.5.0.4 | No fix stated |
| WebSphere MQ 7.1 | 7.1 → 7.1.0.5 | No fix stated |
| WebSphere MQ 7.0 | 7.0 → 7.0.4.3 | No fix stated |
| WebSphere MQ 6.0 | 6.0 → 6.0.2.12 | No fix stated |
| WebSphere MQ | 5.30.0 | No fix stated |
| WebSphere MQ 5.3 | 5.3 → 5.3.1 | No fix stated |
Show the 3 other branches Hide the 3 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| WebSphere MQ | 5.1 | No fix stated |
| WebSphere MQ | 2.1 | No fix stated |
| WebSphere MQ | 2.0 | No fix stated |
Other CVEs of WebSphere MQ
The 8 CVEs of WebSphere MQ →
CVE-2017-1145
IBM WebSphere MQ 8.0.0.6 does not properly terminate channel agents when they are no longer needed, which could allow…
Not rated
CVE-2016-9009
IBM WebSphere MQ 8.0 could allow an authenticated user with authority to create a cluster object to cause a denial of…
Not rated
CVE-2016-3013
IBM WebSphere MQ 8.0 could allow an authenticated user to crash the MQ channel due to improper data conversion handling
Not rated
CVE-2016-3052
Under non-standard configurations, IBM WebSphere MQ might send password data in clear text over the network
Not rated