EUVD-2018-12577

Malware in sbrugna...

Code injection

IBM WebSphere MQ 8.0.0.0 through 9.1.1 could allow a local user to inject code that could be executed with root privileges. This is due to an incomplete fix for CVE-2018-1792. IBM X-ForceID: 154887...

CVE-2018-1998

IBM WebSphere MQ 8.0.0.0 through 9.1.1 could allow a local user to inject code that could be executed with root privileges. This is due to an incomplete fix for CVE-2018-1792. IBM X-ForceID: 154887...

CVE-2018-1792

Summary: CVE-2018-1792 affects IBM WebSphere MQ and IBM MQ across multiple 8.x/9.x releases, enabling a local user to inject code that could run with root privileges due to an incomplete fix. Affected ranges include 8.0.0.0–8.0.0.10, 9.0.0.0–9.0.0.5, 9.0.1–9.0.5, and 9.1.0.0. Impact (as stated): ...