The server message channel agent in the queue manager in the server in IBM WebSphere MQ 7.0.1 before 7.0.1.9, 7.1, and 7.5 on Solaris allows remote attackers to cause a denial of service (invalid address alignment exception and daemon crash) via vectors involving a multiplexed channel.
| Software | From | Fixed in |
|---|---|---|
| ibm / websphere_mq | 7.0.1.0 | 7.0.1.0.x |
| ibm / websphere_mq | 7.0.1.1 | 7.0.1.1.x |
| ibm / websphere_mq | 7.0.1.2 | 7.0.1.2.x |
| ibm / websphere_mq | 7.0.1.3 | 7.0.1.3.x |
| ibm / websphere_mq | 7.0.1.4 | 7.0.1.4.x |
| ibm / websphere_mq | 7.0.1.5 | 7.0.1.5.x |
| ibm / websphere_mq | 7.0.1.6 | 7.0.1.6.x |
| ibm / websphere_mq | 7.0.1.7 | 7.0.1.7.x |
| ibm / websphere_mq | 7.0.1.8 | 7.0.1.8.x |
| ibm / websphere_mq | 7.1 | 7.1.x |
| ibm / websphere_mq | 7.5 | 7.5.x |