CVE-2024-39743

2024-07-0814:15:02

CWE-405

[email protected]

web.nvd.nist.gov

ibm mq operator

denial of service

vulnerability

partial string comparison

ibm x-force id

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

Percentile

13.6%

JSON

IBM MQ Operator 3.2.2 and IBM MQ Operator 2.0.24 IBM MQ Container Developer Edition is vulnerable to denial of service caused by incorrect memory de-allocation. A remote attacker could exploit this vulnerability to cause the server to consume memory resources. IBM X-Force ID: 297172.

Affected configurations

Nvd

Node

ibmmq_operatorRange2.0.0–2.0.24

ibmmq_operatorRange2.2.0–2.2.2

ibmmq_operatorRange2.3.0–2.3.3

ibmmq_operatorRange2.4.0–2.4.8

ibmmq_operatorRange3.1.0–3.1.3

ibmmq_operatorRange3.2.0–3.2.2

ibmmq_operatorMatch3.0.0

ibmmq_operatorMatch3.0.1

VendorProductVersionCPE
ibmmq_operator*cpe:2.3:a:ibm:mq_operator:*:*:*:*:*:*:*:*
ibmmq_operator3.0.0cpe:2.3:a:ibm:mq_operator:3.0.0:*:*:*:*:*:*:*
ibmmq_operator3.0.1cpe:2.3:a:ibm:mq_operator:3.0.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	mq_operator	*	cpe:2.3:a:ibm:mq_operator::::::::
ibm	mq_operator	3.0.0	cpe:2.3:a:ibm:mq_operator:3.0.0:::::::*
ibm	mq_operator	3.0.1	cpe:2.3:a:ibm:mq_operator:3.0.1:::::::*