Buffer Overflow Vulnerability in IBM MQ and IBM MQ Appliance
CVE-2020-4465
5.3MEDIUM
Summary
IBM MQ and its associated appliances exhibit a vulnerability due to a buffer overflow resulting from inadequate error handling in the channel processing code. This flaw allows a remote attacker to exploit older client versions to overload the buffer, potentially leading to a denial of service condition. Organizations using affected versions of IBM MQ should prioritize applying security protocols and updates to mitigate the risks associated with this vulnerability.
Affected Version(s)
MQ Appliance 8.0
MQ Appliance 9.1.LTS
MQ Appliance 9.1.CD
References
CVSS V3.1
Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved