Security Bulletin: IBM WebSphere MQ Heap storage leak on error path could lead to denial of service (CVE-2016-0260)

Summary Heap storage allocated on an error path is not deallocated by queue manager agents, a malicious user could use an application to repeatedly cause the queue manager to execute this error path and eventually exhaust storage for the agent, thereby causing a denial of service. Vulnerability...

CVE-2016-0260

Memory leak in queue-manager agents in IBM WebSphere MQ 8.x before 8.0.0.5 allows remote attackers to cause a denial of service heap memory consumption by triggering many errors...

CVE-2016-0260

CVE-2016-0260 affects IBM WebSphere MQ 8.0.0.0 through 8.0.0.4. A memory leak in queue-manager agents on the error path can cause denial of service via heap exhaustion when many errors are triggered by a remote attacker. The issue’s root cause is a heap storage leak that is not deallocated during...