EUVD-2015-4960

Malware in sbrugna...

Security Bulletin: IBM MQ Light is vulnerable to a remote attack on the MQXR service (CVE-2015-4942)

Summary IBM MQ Light could allow a remote attacker to crash the MQXR service, which will have to be restarted, using a sequence of connect and disconnects. Vulnerability Details CVEID: CVE-2015-4942 DESCRIPTION: IBM WebSphere MQ could allow a remote attacker to crash the MQXR service, which will...

Security Bulletin: Malformed client flows abend MQTT channel (CVE-2015-4943, CVE-2015-4941, CVE-2015-4942)

Summary A number of malformed MQTT client flows could be issued by a malicious user to cause the MQXR service to abend and require manual restart. Vulnerability Details CVEID: CVE-2015-4943 DESCRIPTION: IBM WebSphere MQ could allow a remote attacker to crash the MQXR service using a sequence of...

CVE-2015-4942

IBM MQ Light 1.x before 1.0.2 is vulnerable to a remote crash of the MQXR service through a sequence of connect/disconnect actions. Affected: IBM MQ Light V1.0 and V1.0.1 on all platforms. Root cause: improper handling of repeated MQXR connections, per IBM Security Bulletin. Impact: denial of ser...