Security Bulletin: IBM MQ Appliance is affected by a denial of service vulnerability (CVE-2018-1677)

Summary

IBM MQ Appliance has addressed a denial of service vulnerability.

Vulnerability Details

CVEID: CVE-2018-1677 DESCRIPTION: IBM WebSphere DataPower Appliances and IBM MQ Appliance are vulnerable to a denial of service, caused by the improper handling of full file system. A local attacker could exploit this vulnerability to cause a denial of service.
CVSS Base Score: 5.1
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/145171&gt; for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)

Affected Products and Versions

IBM MQ Appliance 8.0

Maintenance levels between 8.0.0.0 and 8.0.0.10

IBM MQ Appliance 9.0.x Continuous Delivery (CD) Release

Maintenance levels between 9.0.1 and 9.0.5

Remediation/Fixes

IBM MQ Appliance 8.0

Apply fixpack 8.0.0.11 , or later.

IBM MQ Appliance 9.0.x Continuous Delivery (CD) Release

Apply 9.1 Long Term Support (LTS) release , or 9.1.1 Continuous Delivery Release or later.

Workarounds and Mitigations

None