CVE-2015-4943

CVE-2015-4943 affects IBM WebSphere MQ Light 1.x before 1.0.2. A remote attacker can crash the MQXR service by issuing a sequence of connect/disconnect actions; IBM’s bulletin for MQ Light notes the vulnerability and lists affected versions (1.0 and 1.0.1) with a base CVSS of 5. Remediation is to...

CVE-2015-1958

CVE-2015-1958 affects IBM MQ Light V1.0 and V1.0.0.1. The vulnerability stems from improper handling of authentication credentials, allowing a remote attacker to cause a denial of service by sending crafted byte sequences in authentication data, leading to disk resource consumption. Affected prod...

CVE-2015-4942

IBM MQ Light 1.x before 1.0.2 is vulnerable to a remote crash of the MQXR service through a sequence of connect/disconnect actions. Affected: IBM MQ Light V1.0 and V1.0.1 on all platforms. Root cause: improper handling of repeated MQXR connections, per IBM Security Bulletin. Impact: denial of ser...

CVE-2015-1955

IBM MQ Light is affected by a denial-of-service vulnerability (CVE-2015-1955) via a crafted byte sequence in the authentication data. Affected products are MQ Light versions 1.0 and 1.0.0.1 on all platforms; successful exploitation can cause CPU exhaustion on the server. The root cause is imprope...

CVE-2015-1987

CVE-2015-1987 affects IBM MQ Light prior to 1.0.0.2. The issue is due to improper handling of authentication credentials, allowing a remote attacker to cause a denial of service (disk consumption) by sending crafted byte sequences. Affected versions are IBM MQ Light v1.0 and v1.0.0.1 on all platf...

CVE-2015-4941

CVE-2015-4941 affects IBM WebSphere MQ Light 1.x before 1.0.2, where mishandling of abbreviated TLS handshakes can enable a remote attacker to crash the MQXR service (denial of service). IBM security bulletins corroborate affected products and versions (MQ Light V1.0 and V1.0.1) and describe the ...

CVE-2015-1956

CVE-2015-1956 affects IBM MQ Light. The vulnerability is a denial of service caused by improper handling of authentication credentials, allowing a remote attacker to consume disk resources via a crafted byte sequence. It affects IBM MQ Light versions 1.0 and 1.0.0.1; remediation is to upgrade to ...