5.3
Medium
CVE-2018-1374 An IBM WebSphere MQ (Maintenance levels 7.1.0.0 - 7.1.0.9, 7.5.0.0 - 7.5.0.8, 8.0.0.0 - 8.0.0.8, 9.0.0.0 - 9.0.0.2,…
Description
An IBM WebSphere MQ (Maintenance levels 7.1.0.0 - 7.1.0.9, 7.5.0.0 - 7.5.0.8, 8.0.0.0 - 8.0.0.8, 9.0.0.0 - 9.0.0.2, and 9.0.0 - 9.0.4) client connecting to a Queue Manager could cause a SIGSEGV in the Channel process amqrmppa. IBM X-Force ID: 137775.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WebSphere MQ 9.0 | 9.0.0 → 9.0.4 | No fix stated |
| WebSphere MQ 8.0 | 8.0.0.0 → 8.0.0.8 | No fix stated |
| WebSphere MQ 7.5 | 7.5 → 7.5.0.4 | No fix stated |
| WebSphere MQ 7.1 | 7.1 → 7.1.0.9 | No fix stated |
Other CVEs of WebSphere MQ
The 8 CVEs of WebSphere MQ →
CVE-2020-4310
IBM MQ and MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 C are vulnerable to a denial of service attack due to…
5.9
Medium
CVE-2012-4863
IBM WebSphere MQ 7.1 and 7.5: Queue manager has a DoS vulnerability
Not rated
CVE-2018-1551
IBM WebSphere MQ 8.0.0.2 through 8.0.0.8 and 9.0.0.0 through 9.0.0.3 could allow users to have more authority than…
3.1
Low
CVE-2018-1503
IBM WebSphere MQ 7.5, 8.0, and 9.0 could allow a remotely authenticated attacker to to send invalid or malformed headers…
4.3
Medium