Buffer Overflow Vulnerability in IBM MQ and IBM MQ Appliance
CVE-2020-4465

5.3MEDIUM

Key Information:

Vendor
IBM
Vendor
CVE Published:
28 July 2020

Summary

IBM MQ and its associated appliances exhibit a vulnerability due to a buffer overflow resulting from inadequate error handling in the channel processing code. This flaw allows a remote attacker to exploit older client versions to overload the buffer, potentially leading to a denial of service condition. Organizations using affected versions of IBM MQ should prioritize applying security protocols and updates to mitigate the risks associated with this vulnerability.

Affected Version(s)

MQ Appliance 8.0

MQ Appliance 9.1.LTS

MQ Appliance 9.1.CD

References

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.