CVE-2024-51470

published 2024-12-18

CVE-2024-51470: IBM MQ 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, 9.4 CD, IBM MQ Appliance 9.3 LTS, 9.3 CD, 9.4 LTS, and IBM MQ for HPE NonStop 8.1.0 through 8.1.0.25 could…

medium 6.5 CVSS 3.1

AV N AC L PR L UI N S U C N I N A H

IBM MQ 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, 9.4 CD, IBM MQ Appliance 9.3 LTS, 9.3 CD, 9.4 LTS, and IBM MQ for HPE NonStop 8.1.0 through 8.1.0.25 could allow an authenticated user to cause a denial-of-service due to messages with improperly set values.

Affected

8 ranges

Vendor	Product	Version range	Fixed in
ibm	mq	—	—
ibm	mq_appliance	—	—
ibm	mq_appliance	>= 9.1.0.0 < 9.1.0.26	9.1.0.26
ibm	mq_appliance	>= 9.2.0.0 < 9.2.0.30	9.2.0.30
ibm	mq_appliance	>= 9.3.0.0 < 9.3.0.26	9.3.0.26
ibm	mq_appliance	>= 9.4.0.0 < 9.4.0.7	9.4.0.7
ibm	mq_for_hpe_nonstop	>= 8.1.0 < 8.1.0.26	8.1.0.26
ibm	mq_for_hpe_nonstop	8.1.0 – 8.1.0.25	—

CWE-754