Lucene search

IbmCVE-2024-39743

HistoryJul 08, 2024 - 2:15 p.m.

CVE-2024-39743

2024-07-0814:15:02

CWE-405

ibm

web.nvd.nist.gov

ibm mq

operator

denial of service

vulnerability

x-force

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

5.9

Confidence

High

EPSS

Percentile

13.6%

JSON

IBM MQ Operator 3.2.2 and IBM MQ Operator 2.0.24 IBM MQ Container Developer Edition is vulnerable to denial of service caused by incorrect memory de-allocation. A remote attacker could exploit this vulnerability to cause the server to consume memory resources. IBM X-Force ID: 297172.

Affected configurations

Nvd

Vulners

Node

ibmmq_operatorRange2.0.0–2.0.24

ibmmq_operatorRange2.2.0–2.2.2

ibmmq_operatorRange2.3.0–2.3.3

ibmmq_operatorRange2.4.0–2.4.8

ibmmq_operatorRange3.1.0–3.1.3

ibmmq_operatorRange3.2.0–3.2.2

ibmmq_operatorMatch3.0.0

ibmmq_operatorMatch3.0.1

VendorProductVersionCPE
ibmmq_operator*cpe:2.3:a:ibm:mq_operator:*:*:*:*:*:*:*:*
ibmmq_operator3.0.0cpe:2.3:a:ibm:mq_operator:3.0.0:*:*:*:*:*:*:*
ibmmq_operator3.0.1cpe:2.3:a:ibm:mq_operator:3.0.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	mq_operator	*	cpe:2.3:a:ibm:mq_operator::::::::
ibm	mq_operator	3.0.0	cpe:2.3:a:ibm:mq_operator:3.0.0:::::::*
ibm	mq_operator	3.0.1	cpe:2.3:a:ibm:mq_operator:3.0.1:::::::*

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "MQ Operator",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "2.0.24, 3.2.2"
      }
    ]
  }
]

References

exchange.xforce.ibmcloud.com/vulnerabilities/297172

www.ibm.com/support/pages/node/7159714

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

5.9

Confidence

High

EPSS

Percentile

13.6%

JSON

Related for CVE-2024-39743