CVE-2025-3631

🗓️ 11 Jul 2025 18:37:38Reported by ibmType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 24 Views

IBM MQ vulnerability allows denial of service via SIGSEGV in AMQRMPPA channel process

Reporter	Title	Published	Views	Family All 12
IBM Security Bulletins	Security Bulletin: IBM MQ Appliance affected by a denial of service vulnerability (CVE-2025-3631)	28 Jun 202500:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Client can send data resulting in SIGSEGV and amqrmppa process ending	28 Jun 202500:05	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM MQ Operator and Queue manager container images	23 Jul 202517:22	–	ibm
Circl	CVE-2025-3631	11 Jul 202519:19	–	circl
CNNVD	IBM MQ 资源管理错误漏洞	11 Jul 202500:00	–	cnnvd
Cvelist	CVE-2025-3631 IBM MQ denial of service	11 Jul 202518:37	–	cvelist
EUVD	EUVD-2025-21175	3 Oct 202520:07	–	euvd
Tenable Nessus	IBM MQ 9.3 < 9.4.3 CD / 9.4 < 9.4.0.12 LTS / 9.4.3 (7238310)	28 Jun 202500:00	–	nessus
NVD	CVE-2025-3631	11 Jul 202519:15	–	nvd
Positive Technologies	PT-2025-29274 · Ibm · Ibm Mq	11 Jul 202500:00	–	ptsecurity

NVD

Vulners

Node

ibm mq_applianceRange9.3.2–9.3.5.2continuous_delivery

ibm mq_applianceRange9.4.0.0–9.4.0.12lts

ibm mq_applianceRange9.4.0.0–9.4.3continuous_delivery

ibm mq_applianceRange9.4.1.0–9.4.3.0lts

[
  {
    "cpes": [
      "cpe:2.3:a:ibm:mq:9.3.2.0:*:*:*:continuous_delivery:*:*:*",
      "cpe:2.3:a:ibm:mq:9.3.5.1:*:*:*:continuous_delivery:*:*:*",
      "cpe:2.3:a:ibm:mq:9.4.0.0:*:*:*:continuous_delivery:*:*:*",
      "cpe:2.3:a:ibm:mq:9.4.2.1:*:*:*:continuous_delivery:*:*:*",
      "cpe:2.3:a:ibm:mq:9.4.0.0:*:*:*:lts:*:*:*",
      "cpe:2.3:a:ibm:mq:9.4.0.11:*:*:*:lts:*:*:*"
    ],
    "defaultStatus": "unaffected",
    "product": "MQ",
    "vendor": "IBM",
    "versions": [
      {
        "lessThanOrEqual": "9.3.5.1 CD",
        "status": "affected",
        "version": "9.3.2.0 CD",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "9.4.2.1 CD",
        "status": "affected",
        "version": "9.4.0.0",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "9.4.0.11 LTS",
        "status": "affected",
        "version": "9.4.0.0 LTS",
        "versionType": "semver"
      }
    ]
  },
  {
    "cpes": [
      "cpe:2.3:a:ibm:mq_appliance:9.3.2.0:*:*:*:continuous_delivery:*:*:*",
      "cpe:2.3:a:ibm:mq_appliance:9.3.5.2:*:*:*:continuous_delivery:*:*:*",
      "cpe:2.3:a:ibm:mq_appliance:9.4.0.0:*:*:*:lts:*:*:*",
      "cpe:2.3:a:ibm:mq_appliance:9.4.0.11:*:*:*:lts:*:*:*",
      "cpe:2.3:a:ibm:mq_appliance:9.4.1.0:*:*:*:continuous_delivery:*:*:*",
      "cpe:2.3:a:ibm:mq_appliance:9.4.2.1:*:*:*:continuous_delivery:*:*:*"
    ],
    "defaultStatus": "unaffected",
    "product": "MQ Appliance",
    "vendor": "IBM",
    "versions": [
      {
        "lessThanOrEqual": "9.3.5.2 CD",
        "status": "affected",
        "version": "9.3.2.0 CD",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "9.4.0.11 LTS",
        "status": "affected",
        "version": "9.4.0.0 LTS",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "9.4.2.1 CD",
        "status": "affected",
        "version": "9.4.1.0 CD",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
ibm	www.ibm.com/support/pages/node/7238310
ibm	www.ibm.com/support/pages/node/7237025

18 Aug 2025 01:35Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.16.5 - 7.5

EPSS0.00181

SSVC

CWE-416

ibm mq denial of service sigsegv amqrmppa channel vulnerability