CVE-2017-1117

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

IBM WebSphere MQ 8.0 and 9.0 could allow an authenticated user to cause a denial of service to the MQXR channel when trace is enabled. IBM X-Force ID: 121155.

Metrics

CVSS 3.0 5.3/10CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

Vendor	Product	Versions
IBM	MQ	8.0; 9.0; 9.0.1; 8.0.0.1; 8.0.0.2; 8.0.0.3; 8.0.0.4; 8.0.0.5

References

http://www.ibm.com/support/docview.wss?uid=swg22001468Patch, Vendor Advisory
http://www.securityfocus.com/bid/99136Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/121155VDB Entry, Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg22001468Patch, Vendor Advisory
http://www.securityfocus.com/bid/99136Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/121155VDB Entry, Vendor Advisory

Timeline

Published: Jun 21, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-111708.8The ReadTGAImage function in coders\tga.c in ImageMagick 7.0.5-6 has a memory leak vulnerability that can cause memory exhaustion via invali CVE-2017-111715.5Bad reference counting in the context of accept_ice_connection() in gsm-xsmp-server.c in old versions of gnome-session up until version 2.29 CVE-2017-111738.8Missing anchor in generated regex for rack-cors before 0.4.1 allows a malicious third-party site to perform CORS requests. If the configurat CVE-2017-111749.8In install/page_dbsettings.php in the Core distribution of XOOPS 2.5.8.1, unfiltered data passed to CREATE and ALTER SQL queries caused SQL CVE-2017-111756.1In J2 Innovations FIN Stack 4.0, the authentication webform is vulnerable to reflected XSS via the query string to /login.CVE-2017-111767.8The mq_notify function in the Linux kernel through 4.11.9 does not set the sock pointer to NULL upon entry into the retry logic. During a us CVE-2017-111777.5TRITON AP-EMAIL 8.2 before 8.2 IB does not properly restrict file access in an unspecified directory.CVE-2017-111787.5In FineCMS through 2017-07-11, application/core/controller/style.php allows remote attackers to write to arbitrary files via the contents an CVE-2017-111796.1FineCMS through 2017-07-11 has stored XSS in route=admin when modifying user information, and in route=register when registering a user acco CVE-2017-11187.5IBM WebSphere MQ Internet Pass-Thru 2.0 and 2.1 could allow n attacker to cause the MQIPT to stop responding due to an incorrectly configure CVE-2017-111806.1FineCMS through 2017-07-11 has stored XSS in the logging functionality, as demonstrated by an XSS payload in (1) the User-Agent header of an CVE-2017-111815.4In Rise Ultimate Project Manager v1.8, XSS vulnerabilities were found in the Messaging section. Subject and Message fields are vulnerable.