Security Bulletin: IBM MQ Light - Improper handling of authentication credentials (CVE-2015-1955)

Summary IBM MQ Light is vulnerable to a denial of service, caused by an improper handling of authentication credentials. By constructing particular byte sequences a remote attacker could cause the consumption of all CPU. Vulnerability Details CVEID: CVE-2015-1955 DESCRIPTION: IBM MQ Light is...

CVE-2015-1955

IBM MQ Light is affected by a denial-of-service vulnerability (CVE-2015-1955) via a crafted byte sequence in the authentication data. Affected products are MQ Light versions 1.0 and 1.0.0.1 on all platforms; successful exploitation can cause CPU exhaustion on the server. The root cause is imprope...