Vulnerability Bulletins |
IBM Security Bulletin: IBM WebSphere MQ Heap storage leak on error path could lead to denial of service (CVE-2016-0260) |
|
| Affected software | IBM |
|
Heap storage allocated on an error path is not deallocated by queue manager agents, a malicious user could use an application to repeatedly cause the queue manager to execute this error path and eventually exhaust storage for the agent, thereby causing a denial of service.CVE(s): CVE-2016-0260Affected product(s) and affected version(s):IBM WebSphere MQ 8.0.0.0 through 8.0.0.4 maintenance levels are affected.Refer to the following reference URLs for remediation and additional vulnerability More info: https://www.ibm.com/blogs/psirt/ibm-security-bulletin-ibm-websphere-mq-heap-storage-leak-on-error-path-could-lead-to-denial-of-service-cve-2016-0260/ |
|