CVE-2016-0260: High severity ibm websphere mq appliance vulnerability
Published Jun 29, 2016
·Updated
Memory leak in queue-manager agents in IBM WebSphere MQ 8.x before 8.0.0.5 allows remote attackers to cause a denial of service (heap memory consumption) by triggering many errors.
Affected Software
5 affected components
IBM WebSphere MQ=8.0
IBM WebSphere MQ=8.0.0.1
IBM WebSphere MQ=8.0.0.2
IBM WebSphere MQ=8.0.0.3
IBM WebSphere MQ=8.0.0.4
Event History
Jun 29, 2016
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-0260?
CVE-2016-0260 has been categorized as a high severity vulnerability due to its potential to cause denial of service through heap memory consumption.
2
How do I fix CVE-2016-0260?
You can fix CVE-2016-0260 by upgrading IBM WebSphere MQ to version 8.0.0.5 or later.
3
Who is affected by CVE-2016-0260?
CVE-2016-0260 affects all versions of IBM WebSphere MQ 8.x prior to 8.0.0.5.
4
What impact does CVE-2016-0260 have?
The impact of CVE-2016-0260 is that remote attackers can exploit the vulnerability to cause a denial of service.
5
How can I mitigate CVE-2016-0260 if I can't update?
To mitigate CVE-2016-0260 without updating, you can limit remote access and monitor the application for unusual behavior.