CVE-2018-1371: Medium severity ibm websphere mq appliance vulnerability

Published Apr 17, 2018

Updated

An IBM WebSphere MQ 8.0.0.8, 9.0.0.2, and 9.0.4 Client connecting to a MQ Queue Manager can cause a SIGSEGV in the AMQRMPPA channel process terminating it. IBM X-Force ID: 137771.

Affected Software

3 affected components

IBM WebSphere MQ=8.0.0.8

IBM WebSphere MQ=9.0.0.2

IBM WebSphere MQ=9.0.4

Event History

Apr 17, 2018

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the vulnerability ID for this issue?

The vulnerability ID for this issue is CVE-2018-1371.

What is the severity of CVE-2018-1371?

The severity of CVE-2018-1371 is medium with a severity value of 6.5.

Which versions of IBM WebSphere MQ are affected by CVE-2018-1371?

IBM WebSphere MQ versions 8.0.0.8, 9.0.0.2, and 9.0.4 are affected by CVE-2018-1371.

How can a client connecting to an MQ Queue Manager cause the SIGSEGV error in the AMQRMPPA channel process?

A client connecting to an MQ Queue Manager can cause the SIGSEGV error in the AMQRMPPA channel process due to a vulnerability in IBM WebSphere MQ.

Where can I find more information about CVE-2018-1371?

You can find more information about CVE-2018-1371 at the following references: [IBM Support](http://www.ibm.com/support/docview.wss?uid=swg22012983) and [IBM X-Force](https://exchange.xforce.ibmcloud.com/vulnerabilities/137771).