CVE-2017-1747

A specially crafted message could cause a denial of service in IBM WebSphere MQ 9.0, 9.0.0.1, 9.0.0.2, 9.0.1, 9.0.2, 9.0.3, and 9.0.4…

5.3MediumCVSS base score
2.0%Exploitation in 30 daysEPSS · top 19% of all CVEs
NoKnown exploitednot in CISA's KEV catalog
NonePublic exploitsnone known yet

Description

A specially crafted message could cause a denial of service in IBM WebSphere MQ 9.0, 9.0.0.1, 9.0.0.2, 9.0.1, 9.0.2, 9.0.3, and 9.0.4 applications consuming messages that it needs to perform data conversion on. IBM X-Force ID: 135520.

Timeline

2016
30 Nov 2016
30 Nov 2016
ID reserved
By ibm
2018
30 Mar 201816 months later
30 Mar 2018· 16 months later
Published
2024
17 Sept 20246 years later
17 Sept 2024· 6 years later
Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2017-1747, by who scored it
Scored by	CVSS	Score	Vector
ibmCNA (assigner)	3.0	Medium5.3	CVSS:3.0/A:H/AC:H/AV:N/C:N/I:N/PR:L/S:U/UI:N
NVDNVD · Modified	3.0	Medium6.5	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS (exploitation in 30 days): 2.0% · top 19% of all CVEs (9 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.3.

Affected products

IBM · MQ
- affected 9.0
- affected 9.0.1
- affected 9.0.0.1
- affected 9.0.2
- affected 9.0.0.2
- affected 9.0.3
- affected 9.0.4

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/135520 (opens in a new tab)x_refsource_MISCx_transferred
http://www.ibm.com/support/docview.wss?uid=swg22012992 (opens in a new tab)x_refsource_CONFIRMx_transferred
103590 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2017-1747](https://cveledger.app/badge/CVE-2017-1747.svg)](https://cveledger.app/cve/CVE-2017-1747)

Record last updated 17 Sept 2024, 03:42 UTC.