CVE-2024-25016

published 2024-03-03

CVE-2024-25016: IBM MQ and IBM MQ Appliance 9.0, 9.1, 9.2, 9.3 LTS and 9.3 CD could allow a remote unauthenticated attacker to cause a denial of service due to incorrect…

high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C N I N A H

IBM MQ and IBM MQ Appliance 9.0, 9.1, 9.2, 9.3 LTS and 9.3 CD could allow a remote unauthenticated attacker to cause a denial of service due to incorrect buffering logic. IBM X-Force ID: 281279.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
ibm	mq	—	—
ibm	mq	>= 9.0.0.0 < 9.0.0.23	9.0.0.23
ibm	mq	>= 9.1.0.0 < 9.1.0.20	9.1.0.20
ibm	mq	>= 9.2.0 < 9.2.0.22	9.2.0.22
ibm	mq	>= 9.3.0 < 9.3.0.16	9.3.0.16
ibm	mq_appliance	9.3.0.0 – 9.3.5.0	—

CWE-20