CVE-2016-8971 - OpenCVE

IBM WebSphere MQ 8.0 could allow an authenticated user with queue manager permissions to cause a segmentation fault which would result in the box having to be rebooted to resume normal operations. IBM Reference #: 1998663.

No CVSS v4.0

No CVSS v3.1

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Low

Authentication Single

Confidentiality Impact None

Integrity Impact None

Availability Impact Complete

AV:N/AC:L/Au:S/C:N/I:N/A:C

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Ibm	Websphere Mq

Configuration 1 [-]

OR	cpe:2.3:a:ibm:websphere_mq:8.0:::::::*
	cpe:2.3:a:ibm:websphere_mq:8.0.0.1:::::::*
	cpe:2.3:a:ibm:websphere_mq:8.0.0.2:::::::*
	cpe:2.3:a:ibm:websphere_mq:8.0.0.3:::::::*
	cpe:2.3:a:ibm:websphere_mq:8.0.0.4:::::::*
	cpe:2.3:a:ibm:websphere_mq:8.0.0.5:::::::*

No data.

References

Link	Providers
https://www.ibm.com/support/docview.wss?uid=swg21998663

History

No history.

MITRE

Status: PUBLISHED

Assigner: ibm

Published: 2017-03-07T17:00:00

Updated: 2024-08-06T02:35:02.823Z

Reserved: 2016-10-25T00:00:00

Link: CVE-2016-8971

Vulnrichment

No data.

NVD

Status : Analyzed

Published: 2017-03-07T17:59:00.180

Modified: 2017-03-09T16:54:51.587

Link: CVE-2016-8971

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "WebSphere MQ", "vendor": "IBM Corporation", "versions": [{"status": "affected", "version": "5.1"}, {"status": "affected", "version": "5.3"}, {"status": "affected", "version": "6.0"}, {"status": "affected", "version": "7.0"}, {"status": "affected", "version": "5.30.0"}, {"status": "affected", "version": "6.0.1.0"}, {"status": "affected", "version": "6.0.1.1"}, {"status": "affected", "version": "6.0.2.0"}, {"status": "affected", "version": "6.0.2.1"}, {"status": "affected", "version": "6.0.2.10"}, {"status": "affected", "version": "6.0.2.2"}, {"status": "affected", "version": "6.0.2.3"}, {"status": "affected", "version": "6.0.2.4"}, {"status": "affected", "version": "6.0.2.5"}, {"status": "affected", "version": "6.0.2.6"}, {"status": "affected", "version": "6.0.2.7"}, {"status": "affected", "version": "6.0.2.8"}, {"status": "affected", "version": "6.0.2.9"}, {"status": "affected", "version": "7.0.0.1"}, {"status": "affected", "version": "7.0.0.2"}, {"status": "affected", "version": "7.0.1.0"}, {"status": "affected", "version": "7.0.1.1"}, {"status": "affected", "version": "7.0.1.2"}, {"status": "affected", "version": "7.0.1.3"}, {"status": "affected", "version": "7.0.1.4"}, {"status": "affected", "version": "7.1"}, {"status": "affected", "version": "7.5"}, {"status": "affected", "version": "7.5.0.1"}, {"status": "affected", "version": "7.1.0.1"}, {"status": "affected", "version": "7.1.0.2"}, {"status": "affected", "version": "7.0.1"}, {"status": "affected", "version": "7.0.1.5"}, {"status": "affected", "version": "7.0.1.6"}, {"status": "affected", "version": "7.0.1.8"}, {"status": "affected", "version": "7.0.1.7"}, {"status": "affected", "version": "7.0.1.9"}, {"status": "affected", "version": "7.0.1.10"}, {"status": "affected", "version": "7.0.2"}, {"status": "affected", "version": "7.0.3"}, {"status": "affected", "version": "7.0.4"}, {"status": "affected", "version": "7.0.4.1"}, {"status": "affected", "version": "7.0.4.2"}, {"status": "affected", "version": "7.0.4.3"}, {"status": "affected", "version": "7.5.0.2"}, {"status": "affected", "version": "7.1.0.3"}, {"status": "affected", "version": "7.1.0.4"}, {"status": "affected", "version": "7.5.0.3"}, {"status": "affected", "version": "8.0.0.0"}, {"status": "affected", "version": "8.0.0.1"}, {"status": "affected", "version": "7.5.0.4"}, {"status": "affected", "version": "8.0"}, {"status": "affected", "version": "5.3.1"}, {"status": "affected", "version": "6.0.1"}, {"status": "affected", "version": "6.0.1.2"}, {"status": "affected", "version": "6.0.2"}, {"status": "affected", "version": "6.0.2.11"}, {"status": "affected", "version": "6.0.2.12"}, {"status": "affected", "version": "7.0.1.11"}, {"status": "affected", "version": "7.0.1.12"}, {"status": "affected", "version": "2.1"}, {"status": "affected", "version": "7.1.0.5"}, {"status": "affected", "version": "2.0"}, {"status": "affected", "version": "8.0.0.2"}, {"status": "affected", "version": "8"}, {"status": "affected", "version": "8.0.0.4"}, {"status": "affected", "version": "8.0.0.3"}, {"status": "affected", "version": "9.0"}]}], "datePublic": "2017-02-20T00:00:00", "descriptions": [{"lang": "en", "value": "IBM WebSphere MQ 8.0 could allow an authenticated user with queue manager permissions to cause a segmentation fault which would result in the box having to be rebooted to resume normal operations. IBM Reference #: 1998663."}], "problemTypes": [{"descriptions": [{"description": "Denial of Service", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-03-07T16:57:01", "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://www.ibm.com/support/docview.wss?uid=swg21998663"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@us.ibm.com", "ID": "CVE-2016-8971", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "WebSphere MQ", "version": {"version_data": [{"version_value": "5.1"}, {"version_value": "5.3"}, {"version_value": "6.0"}, {"version_value": "7.0"}, {"version_value": "5.30.0"}, {"version_value": "6.0.1.0"}, {"version_value": "6.0.1.1"}, {"version_value": "6.0.2.0"}, {"version_value": "6.0.2.1"}, {"version_value": "6.0.2.10"}, {"version_value": "6.0.2.2"}, {"version_value": "6.0.2.3"}, {"version_value": "6.0.2.4"}, {"version_value": "6.0.2.5"}, {"version_value": "6.0.2.6"}, {"version_value": "6.0.2.7"}, {"version_value": "6.0.2.8"}, {"version_value": "6.0.2.9"}, {"version_value": "7.0.0.1"}, {"version_value": "7.0.0.2"}, {"version_value": "7.0.1.0"}, {"version_value": "7.0.1.1"}, {"version_value": "7.0.1.2"}, {"version_value": "7.0.1.3"}, {"version_value": "7.0.1.4"}, {"version_value": "7.1"}, {"version_value": "7.0"}, {"version_value": "7.5"}, {"version_value": "7.5.0.1"}, {"version_value": "7.1.0.1"}, {"version_value": "7.1.0.2"}, {"version_value": "7.0.1"}, {"version_value": "7.0.1.5"}, {"version_value": "7.0.1.6"}, {"version_value": "7.0.1.8"}, {"version_value": "7.0.1.7"}, {"version_value": "7.0.1.9"}, {"version_value": "7.0.1.10"}, {"version_value": "7.0.2"}, {"version_value": "7.0.3"}, {"version_value": "7.0.4"}, {"version_value": "7.0.4.1"}, {"version_value": "7.0.4.2"}, {"version_value": "7.0.4.3"}, {"version_value": "7.5.0.2"}, {"version_value": "7.1.0.3"}, {"version_value": "7.1.0.4"}, {"version_value": "7.5.0.3"}, {"version_value": "8.0.0.0"}, {"version_value": "8.0.0.1"}, {"version_value": "7.5.0.4"}, {"version_value": "8.0"}, {"version_value": "5.3.1"}, {"version_value": "6.0.1"}, {"version_value": "6.0.1.2"}, {"version_value": "6.0.2"}, {"version_value": "6.0.2.11"}, {"version_value": "6.0.2.12"}, {"version_value": "7.0.1.11"}, {"version_value": "7.0.1.12"}, {"version_value": "2.1"}, {"version_value": "7.1.0.5"}, {"version_value": "2.0"}, {"version_value": "8.0.0.2"}, {"version_value": "8"}, {"version_value": "8.0.0.4"}, {"version_value": "8.0.0.3"}, {"version_value": "9.0"}]}}]}, "vendor_name": "IBM Corporation"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "IBM WebSphere MQ 8.0 could allow an authenticated user with queue manager permissions to cause a segmentation fault which would result in the box having to be rebooted to resume normal operations. IBM Reference #: 1998663."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Denial of Service"}]}]}, "references": {"reference_data": [{"name": "https://www.ibm.com/support/docview.wss?uid=swg21998663", "refsource": "CONFIRM", "url": "https://www.ibm.com/support/docview.wss?uid=swg21998663"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T02:35:02.823Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://www.ibm.com/support/docview.wss?uid=swg21998663"}]}]}, "cveMetadata": {"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "assignerShortName": "ibm", "cveId": "CVE-2016-8971", "datePublished": "2017-03-07T17:00:00", "dateReserved": "2016-10-25T00:00:00", "dateUpdated": "2024-08-06T02:35:02.823Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ibm:websphere_mq:8.0:*:*:*:*:*:*:*", "matchCriteriaId": "421E10D4-4B01-4D52-9FFB-208C4745063E", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:websphere_mq:8.0.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "C5502347-56F2-400F-944B-A532A3A8DE0A", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:websphere_mq:8.0.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "9E6FF889-5D7D-47C0-A2B2-F2BDB39BEFDB", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:websphere_mq:8.0.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "D800EA34-4826-4689-A3C0-03724290567B", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:websphere_mq:8.0.0.4:*:*:*:*:*:*:*", "matchCriteriaId": "DCBDF404-693B-4500-80FA-90AE022BD5C4", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:websphere_mq:8.0.0.5:*:*:*:*:*:*:*", "matchCriteriaId": "5FFC3793-4880-4103-B7F6-06F96A17357B", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "IBM WebSphere MQ 8.0 could allow an authenticated user with queue manager permissions to cause a segmentation fault which would result in the box having to be rebooted to resume normal operations. IBM Reference #: 1998663."}, {"lang": "es", "value": "IBM WebSphere MQ 8.0 podr\u00eda permitir a un usuario autenticado con permisios de gesti\u00f3n queue provocar una falla de segmentaci\u00f3n que dar\u00eda como resultado que la caja tuviera que reiniciarse para reanudar operaciones normales. Referencia de IBM #: 1998663."}], "id": "CVE-2016-8971", "lastModified": "2017-03-09T16:54:51.587", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "COMPLETE", "baseScore": 6.8, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:C", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 6.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.0"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2017-03-07T17:59:00.180", "references": [{"source": "psirt@us.ibm.com", "tags": ["Patch", "Vendor Advisory"], "url": "https://www.ibm.com/support/docview.wss?uid=swg21998663"}], "sourceIdentifier": "psirt@us.ibm.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-119"}], "source": "nvd@nist.gov", "type": "Primary"}]}