CVE-2017-1283 IBM MQ Application Shared Memory Leak Vulnerability (swg22003852)

IBM MQ is a message oriented middleware that allows independent and non-concurrent applications on a distributed system to communicate with each other.

IBM MQ is affected by a Shared memory leak cause by MQ applications which use dynamic queues.

Affected Version:
IBM MQ 8.0.x
IBM MQ 9.0.x Continuous Delivery
IBM MQ 9.0.0.x LTS

QID Detection Logic: (Authenticated)
Operating Sytem: Linux
The QID runs the command "/opt/mqm/bin/dspmqver -v | grep -A3 '^Name'" and "/usr/mqm/bin/dspmqver -v | grep -A3 '^Name'" (for AIX only) to see if the system is running a vulnerable version of IBM MQ or not.

QID Detection Logic (authenticated):
Operating System: Windows
The QID checks if the host is running a vulnerable version of IBM MQ by checking version of the file "bin\dspxmsver.exe". The location of the file is determined via the registry key "HKLM\SOFTWARE\IBM\MQSeries\CurrentVersion" value "FilePath".

Successful exploitation of the vulnerability will affect the availability on the system.

Please refer to IBM advisory swg22003852 for further information.

Patch:
Following are links for downloading patches to fix the vulnerabilities:

swg22003852