CVE-2017-1786 — Missing Release of Resource after Effective Lifetime in IBM Websphere MQ

CWE-772 — Missing Release of Resource after Effective Lifetime3 documents3 sources
Severity
5.3MEDIUMNVD
EPSS
0.3%
top 44.70%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
IBM Websphere MQIBM MQ
Timeline
PublishedApr 23
Latest updateMay 13

Description

IBM WebSphere MQ 8.0 through 8.0.0.8 and 9.0 through 9.0.4 under special circumstances could allow an authenticated user to consume all resources due to a memory leak resulting in service loss. IBM X-Force ID: 136975.

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.6 | Impact: 3.6

Affected Packages2 packages

▶NVDibm/websphere_mq8.0 — 8.0.0.8+1
▶CVEListV5ibm/mq16 versions+15

🔴Vulnerability Details

2
GHSA
GHSA-cmmj-93cm-pcj3: IBM WebSphere MQ 8↗2022-05-13
▶
CVEList
CVE-2017-1786: IBM WebSphere MQ 8↗2018-04-23
▶
CVE-2017-1786 — IBM Websphere MQ vulnerability | cvebase