CVE-2017-1145 — Improper Resource Shutdown or Release in Corporation Websphere MQ

CWE-404 — Improper Resource Shutdown or Release4 documents4 sources
Severity
8.6HIGHNVD
EPSS
0.5%
top 34.21%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
IBM Corporation Websphere MQIBM Websphere MQ
Timeline
PublishedMar 20
Latest updateMay 13

Description

IBM WebSphere MQ 8.0.0.6 does not properly terminate channel agents when they are no longer needed, which could allow a user to cause a denial of service through resource exhaustion. IBM Reference #: 1999672.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:HExploitability: 3.9 | Impact: 4.0

Affected Packages2 packages

▶NVDibm/websphere_mq8.0.0.6
▶CVEListV5ibm_corporation/websphere_mq8.0.0.6

Patches

Patch: www.ibm.com ↗Patch: www.ibm.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-w2ph-64jc-cjr4: IBM WebSphere MQ 8↗2022-05-13
▶
CVEList
CVE-2017-1145: IBM WebSphere MQ 8↗2017-03-20
▶

💥Exploits & PoCs

1
Exploit-DB
Microsoft Windows 7 Kernel - Uninitialized Memory in the Default dacl Descriptor of System Processes Token↗2017-05-15
▶
CVE-2017-1145 — Improper Resource Shutdown or Release | cvebase