Denial of Service Vulnerability in IBM MQ Light
CVE-2015-1956

Currently unrated

Key Information:

Vendor
IBM
Status
Websphere MQ Light
Vendor
CVE Published:
3 August 2015

Summary

A vulnerability in IBM MQ Light prior to version 1.0.0.2 allows remote attackers to exploit a flaw in the handling of authentication data. By sending specially crafted byte sequences, an attacker can create a denial of service condition that leads to excessive disk consumption, potentially disrupting normal operations.

References

http://www-01.ibm.com/support/docview.wss?uid=swg21959204
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.